CVE-2018-12973

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI...

CVE-2018-12972: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input...

PT-2018-11506

Name of the Vulnerable Software and Affected Versions OpenTSDB version 2.3.0 Description An issue was discovered in OpenTSDB, where there is a Cross-Site Scripting XSS vulnerability in the json parameter to the "/q" URI. This allows for potential malicious script execution. Recommendations For...

CVE-2018-12973: Improper Neutralization of Input During Web Page Generation

An issue was discovered in OpenTSDB 2.3.0. There is XSS in parameter 'json' to the /q URI...

OpenTSDB Remote Command Execution Vulnerability

OpenTSDB is a set of open source, scalable distributed time series database. A remote command execution vulnerability exists in OpenTSDB version 2.3.0. An attacker can exploit this vulnerability by sending multiple parameters e.g., o, key, style, yrange, or y2range to the /q URI to execute comman...

PT-2018-11505

Name of the Vulnerable Software and Affected Versions OpenTSDB version 2.3.0 Description An issue was discovered where many parameters to the "/q" URI can execute commands. The vulnerable parameters include o, key, style, and yrange and y2range along with their JSON input. Recommendations For...

q-lab.com XSS vulnerability

Open Bug Bounty ID: OBB-638147 Description| Value ---|--- Affected Website:| q-lab.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

revistaevidencia.com.br XSS vulnerability

Open Bug Bounty ID: OBB-635491 Description| Value ---|--- Affected Website:| revistaevidencia.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Schools Alert Management Script SQL Injection Vulnerability (CNVD-2018-11371)

PHP Scripts Mall Schools Alert Management Script is a school management system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Schools Alert Management Script. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the...

Sql injection

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in getsec.php...

PT-2018-10973

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue exists due to SQL Injection in the PHP Scripts Mall Schools Alert Management Script. Specifically, the vulnerability is exploitable via the ...

CVE-2018-12052: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script via the q Parameter in getsec.php...

Debian DSA-4217-1 : wireshark - security update

It was discovered that Wireshark, a network protocol analyzer, contained several vulnerabilities in the dissectors for PCP, ADB, NBAP, UMTS MAC, IEEE 802.11, SIGCOMP, LDSS, GSM A DTAP and Q.931, which result in denial of service or the execution of arbitrary code. C Tenable Network Security, Inc...

MGASA-2018-0266 Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: The DNS dissector could crash CVE-2018-11356. Multiple dissectors could consume excessive memory CVE-2018-11357. The Q.931 dissector could crash CVE-2018-11358. Multiple dissectors could crash CVE-2018-11359. The GSM A DTAP dissector could...

Updated wireshark packages fix security vulnerabilities

Updated wireshark packages fix security vulnerabilities: The DNS dissector could crash CVE-2018-11356. Multiple dissectors could consume excessive memory CVE-2018-11357. The Q.931 dissector could crash CVE-2018-11358. Multiple dissectors could crash CVE-2018-11359. The GSM A DTAP dissector could...

EasyService Billing SQL Injection Vulnerability

EasyService Billing is a PHP-based service-oriented consumer business management system . A SQL injection vulnerability exists in the 'q' parameter of the jobcard-ongoing.php file in EasyService Billing version 1.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL command...

EasyService Billing 1.0 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications !-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Version:...

EasyService Billing Cross-Site Scripting Vulnerability

EasyService Billing is a PHP-based service-oriented consumer business management system . A cross-site scripting vulnerability exists in the 'q' parameter of the jobcard-ongoing.php file in EasyService Billing version 1.0. A remote attacker can exploit this vulnerability to inject arbitrary web...

Appnitro MachForm SQL Injection Vulnerability

Appnitro MachForm is a tool for creating responsive forms in web pages from Appnitro Software Indonesia. A SQL injection vulnerability exists in the download.php file in Appnitro MachForm versions prior to 4.2.3. The vulnerability can be exploited by a remote attacker to browse, add, change, or...

Security update for wireshark (moderate)

This update for wireshark fixes the following issues: Minor vulnerabilities that could be used to trigger dissector crashes or cause excessive memory use by making Wireshark read specially crafted packages from the network or capture files boo1094301: - CVE-2018-11356: DNS dissector crash -...