SeaCMS SQL Injection Vulnerability (CNVD-2019-08332)

SeaCMS Ocean CMS is a professional open source free PHP film and television system. 6.61 and earlier versions of SeaCMS SQL injection vulnerability, attackers can through the adm1n/admintopicvod.php request in the tid parameter to take advantage of the vulnerability for SQL injection attacks...

SQL Injection Vulnerability in Lazy WorkPass OA Web Intelligent Office System

Lazy work pass OA network intelligent office system is suitable for enterprises and institutions of the general network office software, the system uses B / S operation mode, free version for small and medium-sized enterprises. There is a SQL injection vulnerability in the OA Network Intelligent...

SQL injection vulnerability in the tid parameter of Zhejiang SouPai Information Technology PaiSang network station building system

Paixang network station-building system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the tid parameter of PaiSang website builder system, which is caused by the lack of effective filtering of the tid parameter, and...

SQL Injection Vulnerability in Ocean CMS tid Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admintopicvod.php page of Ocean CMS 6.46 utf-8 official. The lack of filtering of the 'tid' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

Duomi (DuomiCms) movie and TV management system topic and tid parameters exist SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'topic' and 'tid' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the...

FSMCMS p_criticfrontlist. jsp TID parameter SQL injection vulnerability

No description provided by source...

SQL injection vulnerability in the 'TID' parameter of the content management system of Beijing Oriental Wenhui Information Technology Co.

Beijing Oriental Wenhui Information Technology Co., Ltd. is an enterprise that provides users with information construction needs, and the website group content management system is the product of this company. A SQL injection vulnerability exists in the Web Group Content Management System of...

TickFa SQL Injection Vulnerability

TickFa is an online customer support system. TickFa suffers from a SQL injection vulnerability due to the failure of the program's ticket.php script to correctly 'tid' parameter input, which allows remote attackers to exploit the vulnerability by submitting a specially crafted SQL query to...

CVE-2015-4676

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

Sql injection

SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a read action...

CVE-2015-4676

The connected documents confirm a SQL injection vulnerability in TickFa 1.x affecting ticket.php via the tid parameter in a read action. Root cause noted as improper handling/validation of tid input, enabling remote authenticated users to execute arbitrary SQL commands against the database. This ...

Sql injection

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

CVE-2014-2008

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

CVE-2014-2008

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

Sql injection

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2010-2510

The CVE-2010-2510 entry describes a SQL injection in the 2daybiz Web Template Software, specifically in customize.php where the tid parameter is exploited to execute arbitrary SQL commands. The vulnerability enables remote attackers to interact with the underlying database, as indicated by the de...

CVE-2009-3754

Multiple SQL injection vulnerabilities in phpBMS 0.96 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to modules/bms/invoicesdiscountajax.php, 2 f parameter to dbgraphic.php, and 3 tid parameter in a show action to advancedsearch.php...

CVE-2009-2392

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2009-2391

CVE-2009-2391 describes a Cross-site Scripting (XSS) vulnerability in Virtuenetz’s Virtue Online Test Generator, specifically in text.php via the tid parameter. The flaw allows remote attackers to inject arbitrary web script or HTML, enabling potential credential or session data theft if the inje...

CVE-2009-2392

SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter...