PT-2019-8688

Name of the Vulnerable Software and Affected Versions Aterm HC100RC versions 1.0.1 and earlier Description The issue allows an attacker with administrator rights to execute arbitrary code via the netWizard.cgi endpoint, specifically through the date parameter, time parameter, and offset parameter...

CVE-2018-0639: Improper Neutralization of Special Elements used in an OS Command

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via toolsfirmware.cgi date parameter, time parameter, and offset parameter...

CVE-2018-17321

An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...

CVE-2018-17321: Improper Neutralization of Input During Web Page Generation

An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...

SQL Injection Vulnerability in KenCMS V1.1 Enterprise Member Experience System end_time Parameter

KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'endtime' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

PT-2017-17143

Name of the Vulnerable Software and Affected Versions webpagetest version 3.0 Description Multiple Cross-Site Scripting XSS issues were discovered due to insufficient filtration of user-supplied data, such as benchmark and time, passed to the "/webpagetest-master/www/benchmarks/viewtest.php" API...

U.S. Dept Of Defense: SQLi in LASCO CME Query

A SQL injection vulnerability was discovered in the "CME DateTime" parameter on the LASCO CME Query form. The vulnerability allows an attacker to execute arbitrary SQL commands on the server...

FreiChat component SQL injection vulnerability in Joomla!

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. The system provides RSS feeds, site search, etc. Freichat comfreichat is one of the Web-based chat program component. An SQL injection vulnerability exists in the 'getmessages' function i...

Sql injection

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

PT-2015-7276

Name of the Vulnerable Software and Affected Versions FreiChat version 9.6 Description The issue concerns a SQL injection vulnerability in the get messages function. This vulnerability allows remote attackers to execute arbitrary SQL commands via the time parameter to the "server/freichat.php"...

CVE-2015-6512: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the getmessages function in server/plugins/chatroom/chatroom.php in FreiChat 9.6 allows remote attackers to execute arbitrary SQL commands via the time parameter to server/freichat.php...

WordPress Plugin Contact Form DB Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's suite of blogging platforms developed in the PHP language, which supports personal blog sites on PHP and MySQL servers.Contact Form DB also known as CFDB and contact-form-7-to-database-extension is one of the plugins that can submit the create and...

Multiple SQL Injection Vulnerabilities in Zabbix 'chart_bar.php'

Zabbix is a CS-structured distributed network monitoring system. Zabbix has multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary commands via the itemid or time parameter...

CVE-2012-6643

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

PT-2014-2411

Name of the Vulnerable Software and Affected Versions ClipBucket version 2.6 Description The issue concerns SQL injection vulnerabilities in the update counter function, located in includes/functions.php. Remote attackers can exploit this by executing arbitrary SQL commands via the time parameter...

CVE-2012-6643: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the updatecounter function in includes/functions.php in ClipBucket 2.6 allow remote attackers to execute arbitrary SQL commands via the time parameter to 1 videos.php or 2 channels.php. NOTE: some of these details are obtained from third party information...

DEBIAN-CVE-2010-5049

SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...

CVE-2010-5049

SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the navtime parameter...

CVE-2011-1700

Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted profile-time parameter in a printer-url...

Heap overflow

Heap-based buffer overflow in nipplib.dll in Novell iPrint Client before 5.64 allows remote attackers to execute arbitrary code via a crafted file-date-time parameter in a printer-url...