6114 matches found
CVE-2018-2362
A remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP requests to the SAP Startup Service and disclose information such as the platform's hostname...
CVE-2017-16666
Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. NOTE: this issue can be exploited without authentication by leveraging the user registration feature...
Creolabs Gravity 'operator_string_add' function stack buffer overflow vulnerability
Creolabs Gravity is an open source lightweight embedded programming language from Creolabs, Italy. The language supports procedural programming, object-oriented programming, functional programming and data-driven programming. A stack buffer overflow vulnerability exists in the 'operatorstringadd'...
CVE-2017-17873
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...
Moxa NPort W2150A and W2250A Unauthorized Access Vulnerability
Moxa NPort W2150A and NPort W2250A are Moxa's serial communication servers for connecting industrial serial devices to a network. An unauthorized access vulnerability exists in the Moxa NPort W2150A prior to version 1.11 and the NPort W2250A prior to version 1.11, which stems from a null default...
Bus Booking Script SQL Injection Vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script version 1.0. The vulnerability can be exploited to inject SQL commands by sending the 'txtname' parameter to the admin/index.php file...
Wordpress esb-csv-import-export plugin cross-site scripting vulnerability
WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . esb-csv-import-export plugin is used in one of the plug-ins for importing and exporting CSV files . A...
FS Foodpanda Clone SQL Injection Vulnerability
FS Foodpanda Clone is a set of online food trading website scripts written using the PHP CodeIgniter framework. A SQL injection vulnerability exists in FS Foodpanda Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...
PHP Scripts Mall Professional Service Script SQL Injection Vulnerability
PHP Scripts Mall Professional Service Script is a set of PHP based professional service website scripts by PHP Scripts Mall India. The script is able to provide users with the required information about professional service providers. A SQL injection vulnerability exists in PHP Scripts Mall...
PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability
PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...
FS Grubhub Clone SQL Injection Vulnerability
FS Grubhub Clone is a set of PHP-based scripts for online food ordering websites. A SQL injection vulnerability exists in FS Grubhub Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...
FS Olx Clone SQL Injection Vulnerability
FS Olx Clone is a set of PHP and MySQL based scripts for classifieds publishing websites. A SQL injection vulnerability exists in FS Olx Clone version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'scat' parameter to the subpage.php file or the...
PHP Scripts Mall Event Search Script SQL Injection Vulnerability
PHP Scripts Mall Event Search Script is a PHP based online event registration script from PHP Scripts Mall India. The script can be embedded into a website and accept online event bookings from other organizations or companies. A SQL injection vulnerability exists in PHP Scripts Mall Event Search...
Simple Chatting System Arbitrary File Upload Vulnerability
Simple Chatting System is a PHP-based online chatting application. An arbitrary file upload vulnerability exists in Simple Chatting System version 1.0. The vulnerability can be exploited to upload arbitrary files via the view/myprofile.php file...
FS Linkedin Clone SQL Injection Vulnerability
FS Linkedin Clone is a set of PHP and MySQL based scripts for job search and recruitment websites. A SQL injection vulnerability exists in FS Linkedin Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'grid' parameter to the group.php file, the 'fid' parameter to...
FS Groupon Clone SQL Injection Vulnerability
FS Groupon Clone is a set of PHP and MySQL based online transaction website scripts. The script supports a wide range of online transactions such as event bookings, travel bookings, merchandise purchases and community services. A SQL injection vulnerability exists in FS Groupon Clone version 1.0....
FS Monster Clone SQL Injection Vulnerability
FS Monster Clone is a PHP and MySQL based online job search and recruitment website script. A SQL injection vulnerability exists in FS Monster Clone version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the EmployerDetails.php...
DomainSale PHP Script SQL Injection Vulnerability
DomainSale PHP Script is a set of scripts for online domain name selling websites based on PHP and MySQL. A SQL injection vulnerability exists in DomainSale PHP Script version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the...