2320 matches found
CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command
Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...
CVE-2017-17431: Improper Neutralization of Input During Web Page Generation
GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765...
Sql injection
E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...
CVE-2017-15373
CVE-2017-15373 : E-Sic 1.0 contains a SQL injection in the query parameter “q” of esiclivre/restrito/inc/lkpcep.php (the search private area). The root cause is improper handling of input leading to arbitrary SQL execution. Impact is described as partial to high confidentiality, integrity, and av...
CVE-2017-15373: Improper Neutralization of Special Elements used in an SQL Command
E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...
Fedora Update for q FEDORA-2017-8f27031c8f
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for q FEDORA-2017-3a568adb31
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 25 Update: q-7.11-29.fc25
Q is a powerful and extensible functional programming language based on the term rewriting calculus. You specify an arbitrary system of equations which the interpreter uses as rewrite rules to reduce expressions to normal form. Q is useful for scientific programming and other advanced application...
[SECURITY] Fedora 26 Update: q-7.11-29.fc26
Q is a powerful and extensible functional programming language based on the term rewriting calculus. You specify an arbitrary system of equations which the interpreter uses as rewrite rules to reduce expressions to normal form. Q is useful for scientific programming and other advanced application...
ImageMagick Denial of Service Vulnerability (CNVD-2017-26585)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in the ReadMPCImage of the coders/mpc.c file in ImageMagick version 7.0.6-8 Q16, which stems from the program failing to...
CVE-2017-12798
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...
CVE-2017-12798: Improper Neutralization of Input During Web Page Generation
Cross-Site Scripting XSS exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php...
q-lympics.de XSS vulnerability
Open Bug Bounty ID: OBB-277520 Description| Value ---|--- Affected Website:| q-lympics.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Muviko 1.0 - q SQL Injection
Muviko 1.0 - q SQL Injection Exploit Title: Muviko - Video CMS v1.0 – 'q' Parameter SQL Injection Date: 02.08.2017 Vendor Homepage: https://muvikoscript.com/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits Overview Muviko is a...
PaulShop 'q' Parameter SQL Injection Vulnerability
PaulShop is a shopping cart web system. A SQL injection vulnerability exists in the PaulShop 'q' parameter. This allows attackers to exploit the vulnerability to obtain sensitive information...
Frans Visits Vegas: Frans Visits Vegas Announcement
Hey hackers and soon to be hackers! F204937 I will be doing a webinar for 1 hour at 21:00pm PDT Wednesday the 26th, the night before DEFCON and h1-702 2017. The idea is to share knowledge on how to win over security teams and gain influence as a hacker. I will cover the following topics: How I go...
q-t.nl XSS vulnerability
Vulnerable URL: http://q-t.nl/index.php/%3C!'/!%22/!/'//%22/--!%3E%3C/Title/%3C/script/%3E%3CInput%20Type=Text%20Style=position:fixed;top:0;left:0;font-size:999px%20/;%20Onmouseenter=confirm%60XSSPOSED%60%20//%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.10.2017...
SWFTools Denial of Service Vulnerability (CNVD-2017-15101)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'dictlookup' function in the lib/q.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
