CVE-2018-7894

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

CVE-2018-7894 affects Eramba e1.0.6.033, with a Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter. The issue is documented across multiple sources (NVD entry for CVE-2018-7894 and related Red Hat/CNVD records) and is described as: an XSS vulnerability cau...

Afian FileRun SQL Injection Vulnerability

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

Sql injection

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

Sql injection

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7735

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

PT-2018-18246

Name of the Vulnerable Software and Affected Versions: Afian FileRun versions prior to 2018.02.13 Description: The issue allows for remote SQL injection when logged in as a superuser. This occurs via the search parameter in a "/?module=metadata&section=cpanel&page=list filetypes" API endpoint...

PT-2018-18245

Name of the Vulnerable Software and Affected Versions: Afian FileRun versions prior to 2018.02.13 Description: The issue allows for remote SQL injection when an attacker is logged in as a superuser. This can be achieved via the search parameter in a "/?module=users&section=cpanel&page=list" API...

CVE-2018-7734: Improper Neutralization of Special Elements used in an SQL Command

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7735: Improper Neutralization of Special Elements used in an SQL Command

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=metadata&section=cpanel&page=listfiletypes request...

gatbik.com XSS vulnerability

Open Bug Bounty ID: OBB-566336 Description| Value ---|--- Affected Website:| gatbik.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-6024

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter...

PT-2018-17307

Name of the Vulnerable Software and Affected Versions Joomla! Project Log version 1.5.3 Description A SQL Injection issue exists in the Project Log component for Joomla!, which can be exploited via the search parameter. Recommendations For version 1.5.3, update to a newer version that contains a...

CVE-2018-6024: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter...

CVE-2018-6581

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

Sql injection

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...

CVE-2018-6581

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter...