9 matches found
Sql injection
Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...
CVE-2017-17568
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...
CVE-2017-17569
Scubez Posty Readymade Classifieds has XSS via the admin/useractivatesubmit.php ID parameter...
PT-2017-14862
Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to incorrect access control in the backend PHP script, specifically when visiting the admin/user activate submit.php endpoint. This might allow...
PT-2017-14863
Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is achieved through the ID parameter in the "admin/user activate...
PT-2017-14861
Name of the Vulnerable Software and Affected Versions Scubez Posty Readymade Classifieds affected versions not specified Description The issue is related to SQL Injection, which occurs via the ID parameter in the "admin/user activate submit.php" API endpoint. Recommendations For Scubez Posty...
CVE-2017-17567: Improper Neutralization of Special Elements used in an SQL Command
Scubez Posty Readymade Classifieds has SQL Injection via the admin/useractivatesubmit.php ID parameter...
CVE-2017-17568: Incorrect Permission Assignment for Critical Resource
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/useractivatesubmit.php aka the backend PHP script, which might allow remote attackers to obtain sensitive information via a direct request...