Sql injection

Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMSFunction.php...

PT-2023-31587 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: Semcms version 4.8 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the AID parameter at the SEMCMS Function.php file. Recommendations: For Semcms version 4.8, consider restricting access to the SEMC...

SEMCMS SQL Injection Vulnerability

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS v4.8, which originates from the AID parameter in SEMCMSFunction.php containing SQL injection...

CVE-2023-50563

Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMSFunction.php...

CVE-2023-50563

Semcms v4.8 contains a SQL injection vulnerability in SEMCMS_Function.php via the AID parameter. Affected component: SEMCMS_Function.php; vulnerable input AID leads to potential unauthorized data access or modification (high/critical impact per CVSS 3.1). No exploitation details are provided in t...

CVE-2023-50563: Improper Neutralization of Special Elements used in an SQL Command

Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMSFunction.php...

CVE-2022-36583

DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...

CVE-2022-36583

DedeCMS V5.7.97 was discovered to contain multiple cross-site scripting XSS vulnerabilities at /dede/codo.php via the dopost, rpok, and aid parameters...

DedeCMS cross-site scripting vulnerability

DedeCMS 织梦内容管理系统 is a PHP-based open source content management system CMS from China's Zhuo Zhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval.A security vulnerability exists in DedeCMS version V5.7.97, which was discovered to...

CVE-2020-22206

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

CVE-2020-22206

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

CVE-2020-22206

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

CVE-2020-22206: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

ECShop SQL Injection Vulnerability

ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECShop version 3.0. An attacker can exploit this vulnerability by using the aid parameter of admin/affiliateck.php to conduct SQL injection attacks...

CVE-2019-11518

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

Yot CMS 3.3.1 - 'aid' SQL Injection

Exploit Title: Yot CMS 3.3.1 - 'aid' SQL Injection Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: https://yot.sourceforge.io/ Software Link: https://ayera.dl.sourceforge.net/project/yot/Yot%203.3.1.zip Version: 3.3.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

CVE-2018-5259

Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter...

PT-2018-16846

Name of the Vulnerable Software and Affected Versions DiscuzX version X3.4 Description The issue allows remote authenticated users to bypass intended attachment-deletion restrictions. This is achieved by modifying the aid parameter. Recommendations For version X3.4, consider restricting access to...

CVE-2018-5259: Undefined Security Weakness

Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter...

Joomla Payage component 'aid' parameter SQL injection vulnerability

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the 'aid' parameter of the Joomla Payage component, which allows an attacker to exploit the vulnerability to gain access to sensitive database information...