PT-2019-18980

Name of the Vulnerable Software and Affected Versions BEESCMS version 4.0 Description The issue allows for the addition of arbitrary VIP accounts due to a CSRF vulnerability. This can be exploited via the "admin/admin member.php?action=add&nav=add web user&admin p nav=user" URI, which is an API...

CVE-2006-2912

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...

Sql injection

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...