Sql injection

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php...

CVE-2022-32991

Web Based Quiz System v1.0 is vulnerable to SQL injection via the eid parameter in welcome.php due to lack of input validation. This can allow an attacker to execute arbitrary SQL and potentially steal sensitive database data. Several sources (CNVD, NVD, Red Hat, CVE records) confirm the vulnerab...

CVE-2022-32991

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php...

PT-2022-21625

Name of the Vulnerable Software and Affected Versions Web Based Quiz System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the eid parameter at the "welcome.php" endpoint. Recommendations For Web Based Quiz System version 1.0...

CVE-2022-32991: Improper Neutralization of Special Elements used in an SQL Command

Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the eid parameter at welcome.php...

CVE-2017-7321: Improper Control of Generation of Code

setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the configkey parameter to the setup/index.php?action=welcome URI...

PT-2015-4107

Name of the Vulnerable Software and Affected Versions com.tapatalk.wbb4 plugin versions 1.x before 1.1.2 for Woltlab Burning Board 4.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the app android id or app kindle url parameters in the welcome.php file o...

CVE-2014-8870: Undefined Security Weakness

Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the boardurl parameter...

CVE-2014-8869: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk com.tapatalk.wbb4 plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject arbitrary web script or HTML via the 1 appandroidid or 2 appkindleurl parameter...

Tapatalk for WoltLab Burning Board 'welcome.php' Has Multiple Cross-Site Scripting Vulnerabilities

WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. Tapatalk for WoltLab Burning Board 'welcome.php' has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to...

CVE-2010-2915

SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2915

CVE-2010-2915 describes a SQL injection vulnerability in welcome.php of AJ Square AJ HYIP PRIME, allowing remote attackers to manipulate the id parameter to execute arbitrary SQL commands. The underlying issue is input handling in the affected script, leading to potential data exposure or modific...

CVE-2010-2915

SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-2915: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in welcome.php in AJ Square AJ HYIP PRIME allows remote attackers to execute arbitrary SQL commands via the id parameter...

AJ HYPE PRIME SQL Injection

/ AJ HYPE PRIME id Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection welcome.php GET : id : HOST/PATH/forum/welcome.php?id=SQL CODE SQL CODE :...

CVE-2007-1643

Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...

CVE-2005-2792

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...

CVE-2005-2793

PHP remote file inclusion vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to execute arbitrary PHP code via the customwelcomepage parameter...

CVE-2005-2792: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in welcome.php in phpLDAPadmin 0.9.6 and 0.9.7 allows remote attackers to read arbitrary files via a .. dot dot in the customwelcomepage parameter...