15472 matches found
PT-2017-7554
Name of the Vulnerable Software and Affected Versions AlegroCart version 1.2.8 Description The issue allows remote administrators to execute arbitrary SQL commands via the download parameter in the check download and possibly check filename function in upload/admin2/model/products/model admin...
Job Board Software 1.0 SQL Injection
Exploit Title: Job Board Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/job-board-software Demo: http://jobsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...
CVE-2015-7877: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
PHP Dashboards NEW 4.4 - SQL Injection
Exploit Title: PHP Dashboards NEW 4.4 - SQL Injection Dork: N/A Date: 11.09.2017 Vendor Homepage: http://dataninja.biz/ Software Link: https://codecanyon.net/item/php-dashboards-v40-collaborative-social-dashboards/19314871 Demo: http://phpdashboardv4.dataninja.biz/ Version: 4.4 Category: Webapps...
Online Print Business 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Online Print Business Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/online-print-business Demo:...
Restaurant Website Script 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Restaurant Website Script 1.0 - SQL Injection Dork: N/A Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/small-business/restaurant-website-script Demo: http://restaurant.scriptzee.com/ Version: 1.0...
CVE-2017-11161
Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to label.php; or 2 type parameter to synotheme.php...
Sql injection
Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to label.php; or 2 type parameter to synotheme.php...
CVE-2017-11161
Synology Photo Station is affected by SQL injection vulnerabilities (CVE-2017-11161) in versions prior to 6.7.4-3433 and 6.3-2968. The flaws allow remote attackers to execute arbitrary SQL commands via the article_id parameter to label.php or the type parameter to synotheme.php. Impact is high du...
PT-2017-11786
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.7.4-3433 Synology Photo Station versions prior to 6.3-2968 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the article id parameter to...
Sefrengo SQL Injection Vulnerability
Sefrengo is an open source web content management system CMS based on PHP and MySql. The system supports WYSIWYG editors, image uploads and more. A SQL injection vulnerability exists in versions of Sefrengo prior to 1.6.5 beta2. A remote attacker can exploit this vulnerability to execute arbitrar...
Sql injection
SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...
CVE-2016-10509
SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier aka courierid parameter to openbay.php...
CVE-2016-10509
SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier aka courierid parameter to openbay.php...
Sql injection
SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier aka courierid parameter to openbay.php...
CVE-2016-10509
SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier aka courierid parameter to openbay.php...
PT-2017-7907
Name of the Vulnerable Software and Affected Versions OpenCart versions prior to 2.3.0.0 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via a carrier also known as courier id parameter to the "openbay.php" endpoint...
CVE-2017-10842
SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...