80 matches found
CVE-2020-21667
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
CVE-2020-21667: Improper Neutralization of Special Elements used in an SQL Command
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
Sql injection
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...
Sql injection
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...
CVE-2019-16692
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used...
CVE-2019-16693
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...
CVE-2019-16695
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter.php table parameter when action=add is used...
CVE-2019-16696
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...
CVE-2019-16693: Improper Neutralization of Special Elements used in an SQL Command
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...
CVE-2019-16696: Improper Neutralization of Special Elements used in an SQL Command
phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...
CVE-2019-6509
An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...
CVE-2019-6507
An issue was discovered in creditease-sec insight through 2018-09-11. loginuserdelete in srcpm/app/admin/views.py allows CSRF...
CVE-2019-6509
An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...
CVE-2019-6510
An issue was discovered in creditease-sec insight through 2018-09-11. userdelete in srcpm/app/admin/views.py allows CSRF...
CVE-2019-6509
An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...
CVE-2019-6508
An issue was discovered in creditease-sec insight through 2018-09-11. rolepermdelete in srcpm/app/admin/views.py allows CSRF...
PT-2019-18128
Name of the Vulnerable Software and Affected Versions creditease-sec insight versions through 2018-09-11 Description An issue was discovered that allows CSRF, specifically in the depart delete function within the srcpm/app/admin/views.py file. Recommendations For creditease-sec insight versions...
CVE-2019-6509: Cross-Site Request Forgery (CSRF)
An issue was discovered in creditease-sec insight through 2018-09-11. departdelete in srcpm/app/admin/views.py allows CSRF...
PT-2019-18126
Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the login user delete function located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider...
PT-2019-18127
Name of the Vulnerable Software and Affected Versions creditease-sec insight through 2018-09-11 Description An issue was discovered that allows CSRF in the role perm delete function located in srcpm/app/admin/views.py. Recommendations For creditease-sec insight through 2018-09-11, consider...