13 matches found
EUVD-2005-2474
Malware in sbrugna...
EUVD-2023-42541
Malicious code in bioql PyPI...
CVE-2023-38768
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...
CVE-2023-38768
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...
Sql injection
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...
CVE-2023-38768: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...
CVE-2023-38768
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...
CVE-2023-38768
CVE-2023-38768 describes a SQL injection in ChurchCRM v5.0.0, where the vulnerability is exploitable via the PropertyID parameter in /QueryView.php. The connected documents confirm this classic information disclosure vulnerability without detailing exploit access or availability of a patch. Impac...
CVE-2023-38768
SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the 1 listingid parameter to a images.php, b indexother.php, or c requestinfo.php; 2 propertyid parameter to d searchlookup.php, 3 id parameter to e images.php, or...
CVE-2006-2672: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the 1 listingid parameter to a images.php, b indexother.php, or c requestinfo.php; 2 propertyid parameter to d searchlookup.php, 3 id parameter to e images.php, or...
CVE-2005-2473: Undefined Security Weakness
Multiple SQL injection vulnerabilities in ChurchInfo allow remote attackers to execute arbitrary SQL commands via the PersonID parameter to 1 PersonView.php, 2 MemberRoleChange.php, 3 PropertyAssign.php, 4 WhyCameEditor.php, 5 GroupPropsEditor.php, 6 Reports/PDFLabel.php, or 7 UserDelete.php, 8...
CVE-2005-2474: Undefined Security Weakness
ChurchInfo allows remote attackers to execute obtain sensitive information via the PersonID parameter to 1 PersonView.php, 2 MemberRoleChange.php, 3 PropertyAssign.php, 4 WhyCameEditor.php, 5 GroupPropsEditor.php, 6 Reports/PDFLabel.php, or 7 UserDelete.php, an invalid Number parameter to 8...