CVE-2022-1192

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

HelpDezk SQL Injection Vulnerability

HelpDezk is a powerful software from HelpDezk Inc. for managing requests/events. HelpDezk version 1.1.10 suffers from a SQL injection vulnerability that originates from allowing a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid routing and extract all...

CVE-2023-3038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in HelpDezk Community affecting version 1.1.10. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid route and extract all the information stored in the application...

CVE-2022-1192

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2022-1192: Improper Neutralization of Input During Web Page Generation

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

DEBIAN-CVE-2021-46709

phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter aka num or number...

Microsoft Visual Basic FlexGrid ActiveX Control Rows Parameter Memory Corruption - Ver2 (CVE-2008-4254)

A memory corruption vulnerability has been reported in Microsoft Visual Basic. An attacker could exploit this vulnerability crafted Rows and Cols properties to the ExpandAll and CollapseAll methods, related to access of incorrectly initialized objects and corruption of the system state. Successfu...

CVE-2006-2169: Undefined Security Weakness

RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message...

RT: Request Tracker vuln.

RT: Request Tracker vuln. Vuln. discovered by : r0t Date: 30 april 2006 vendor:www.bestpractical.com/?rt=3.5.HEAD affected versions:RT 3.5.HEAD orginal advisory: http://pridels.blogspot.com/2006/04/rt-request-tracker-vuln.html Vuln. Description: RT contains a flaw that may lead to an unauthorized...