255 matches found
CVE-2020-29659
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...
CVE-2020-29659: Buffer Copy without Checking Size of Input
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack...
Flexense DupScout Enterprise Buffer Error Vulnerability
Flexense DupScout Enterprise is a duplicate file finder from the Israeli company Flexense. The software supports searching and removing duplicate files from local disks, network shares, NAS storage devices, and enterprise storage systems, and can search for duplicate files, save reports, replace...
Codeorigin Sysax Multi Server Authorization Issues Vulnerability
Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows from Codeorigin USA. An authorization issue vulnerability exists in Codeorigin Sysax Multi Server version 6.90. The vulnerability can be exploited by an attacker to access other user sessions with t...
CVE-2020-13228
An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter...
CVE-2020-13228
An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter...
Cross site scripting
An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter...
CVE-2020-13228
An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter...
CVE-2020-13228: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter...
CVE-2014-3719: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in bsi.dll in Bank Soft Systems BSS RBS BS-Client. Private Client aka RBS BS-Client. Retail Client 2.5, 2.4, and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 DICTIONARY, 2 FILTERIDENT, 3 FROMSCHEME, 4 FromPoint, ...
CVE-2019-14348
The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsportseason/new-yorkers/?action=playerlist sid parameter...
CVE-2019-14348: Improper Neutralization of Special Elements used in an SQL Command
The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsportseason/new-yorkers/?action=playerlist sid parameter...
CVE-2018-14503
CVE-2018-14503 is an XSS vulnerability in Coremail XT 3.0, affecting the intervalCheck.jsp page. An attacker can inject arbitrary web script/HTML via the sid parameter, enabling remote script execution in the context of the affected user. The connected documents specify the affected software (Cor...
CVE-2018-14503
Cross-site scripting XSS vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...
CVE-2018-14503: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in intervalCheck.jsp in Coremail XT 3.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...
CVE-2018-6575
SQL Injection exists in the JEXTN Classified 1.0.0 component for Joomla! via a view=boutique&sid= request...
PHP Scripts Mall Secure E-commerce Script SQL Injection Vulnerability
PHP Scripts Mall Secure E-commerce Script is a set of PHP based e-commerce website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Secure E-commerce Script version 2.0.1. A remote attacker can inject SQL into the category.php file by sending the...
PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability
PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...