EasyService Billing 1.0 - Cross-Site Scripting

EasyService Billing 1.0 - Cross-Site Scripting !-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Versio...

PT-2018-17541

Name of the Vulnerable Software and Affected Versions Appnitro MachForm versions prior to 4.2.3 Description An issue was discovered in Appnitro MachForm. There is a SQL injection vulnerability via the q parameter in the "download.php" endpoint. Recommendations For versions prior to 4.2.3, update ...

PT-2018-17540

Name of the Vulnerable Software and Affected Versions Appnitro MachForm versions prior to 4.2.3 Description An issue was discovered that leads to a path traversal vulnerability. The module responsible for serving stored files retrieves the path from the database. By modifying the file name in the...

CVE-2018-6410: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter...

CVE-2018-6409: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path from the database. Modifying the name of the file to serve on the corresponding apform table leads to a path traversal vulnerability via the download.php q parameter...

openSUSE: Security Advisory for wireshark (openSUSE-SU-2018:1428-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EasyService Billing 1.0 - Cross-Site Scripting

!-- Exploit Title: EasyService Billing 1.0 Cross-Site Scripting in 'q' Parameter Date: 25-05-2018 Software Link: https://codecanyon.net/item/easyservice-billing-php-scripts-for-quotation-invoice-payments-etc/16687594 Exploit Author: Divya Jain Version: EasyService Billing 1.0 CVE: CVE-2018-11443...

CVE-2018-11444

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11443

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

Cross site scripting

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

Sql injection

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11443: Improper Neutralization of Input During Web Page Generation

The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0...

PT-2018-10574

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0 Description A SQL Injection issue was observed in the parameter q in the jobcard-ongoing.php file. Recommendations For EasyService Billing version 1.0, avoid using the parameter q in the affected file until the...

PT-2018-10573

Name of the Vulnerable Software and Affected Versions EasyService Billing version 1.0 Description The issue affects the q parameter in jobcard-ongoing.php, where a Cross-site Scripting problem has been identified. Recommendations For EasyService Billing version 1.0, avoid using the q parameter in...

CVE-2018-11444: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0...

CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...

CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...

Design/Logic Flaw

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...

CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...

CVE-2018-11358

In Wireshark 2.6.0, 2.4.0 to 2.4.6, and 2.2.0 to 2.2.14, the Q.931 dissector could crash. This was addressed in epan/dissectors/packet-q931.c by avoiding a use-after-free after a malformed packet prevented certain cleanup...