83 matches found
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
CVE-2019-11565
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
CVE-2019-11565: Server-Side Request Forgery (SSRF)
Server Side Request Forgery SSRF exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter...
PT-2019-12384
Name of the Vulnerable Software and Affected Versions Print My Blog plugin versions prior to 1.6.7 Description A Server Side Request Forgery SSRF issue exists, which can be exploited via the site parameter. Recommendations For versions prior to 1.6.7, update to version 1.6.7 or later to resolve t...
PT-2015-5315
Name of the Vulnerable Software and Affected Versions Zoho ManageEngine ServiceDesk Plus SDP versions prior to 9.0 build 9031 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the site parameter in the reports/CreateReportTable.jsp fil...
CVE-2015-1479: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus SDP before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter...
DEBIAN-CVE-2013-4556
Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...
UBUNTU-CVE-2013-4556
Cross-site scripting XSS vulnerability in the author page prive/formulaires/editerauteur.php in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the urlsite parameter...
CVE-2011-5160
Cross-site scripting XSS vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter...
CVE-2011-5160
Cross-site scripting XSS vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter...
PT-2012-2138
Name of the Vulnerable Software and Affected Versions OpenEMR version 4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the site parameter in setup.php. Recommendations For OpenEMR version 4, update to a newer version that...
CVE-2011-5160: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in setup.php in OpenEMR 4 allows remote attackers to inject arbitrary web script or HTML via the site parameter...
WikLink 0.1.3 SQL Injection
www.eVuln.com advisory: "fold" and "site" SQL Injections in WikLink Summary: http://evuln.com/vulns/172/summary.html Details: http://evuln.com/vulns/172/description.html -----------Summary----------- eVuln ID: EV0172 Software: WikLink Vendor: n/a Version: 0.1.3 Critical Level: medium Type: SQL...
PT-2010-5579
Name of the Vulnerable Software and Affected Versions Hycus CMS version 1.0.3 Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by exploiting directory traversal vulnerabilities using a .. dot dot in the "site" parameter to specific API...
CVE-2010-4613: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the site parameter to 1 index.php and 2 admin.php...
CVE-2008-6284
SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter...
Sql injection
SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter...
CVE-2008-6284: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in edit.php in Z1Exchange 1.0 allows remote attackers to execute arbitrary SQL commands via the site parameter...