CVE-2018-12110

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

Sql injection

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

CVE-2018-12110

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

CVE-2018-12110: Improper Neutralization of Special Elements used in an SQL Command

portfolioCMS 1.0.5 has SQL Injection via the admin/portfolio.php preview parameter...

PT-2018-11020

Name of the Vulnerable Software and Affected Versions portfolioCMS version 1.0.5 Description The issue is related to SQL Injection, which can be exploited via the preview parameter in the "admin/portfolio.php" endpoint. Recommendations For portfolioCMS version 1.0.5, avoid using the preview...

CVE-2018-6001

The Soundy Audio Playlist plugin 4.6 and below for WordPress has Cross-Site Scripting via soundy-audio-playlist\templates\front-end.php warsdyplpreview parameter...

PT-2011-4721

Name of the Vulnerable Software and Affected Versions Wuzly version 2.0 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the preview parameter to "index.php". Recommendations For Wuzly version 2.0, avoid...

CVE-2009-0423

CVE-2009-0423 describes a directory traversal vulnerability in the PHPPA (Php Photo Album) 0.8 BETA release. An attacker can exploit improper handling in index.php to cause local file inclusion via a .. (dot dot) in the preview parameter, enabling arbitrary local file access or execution. Impact ...