13 matches found
CVE-2025-11033
A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the file /Profilers/PriProfile/COUNT3s7.php. The manipulation of the argument cbe leads to sql injection. It is possible to initiate the attack remotel...
CVE-2025-11033 kidaze CourseSelectionSystem COUNT3s7.php sql injection
A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the file /Profilers/PriProfile/COUNT3s7.php. The manipulation of the argument cbe leads to sql injection. It is possible to initiate the attack remotel...
CourseSelectionSystem SQL Injection Vulnerability
CourseSelectionSystem is a simple online course selection system by the individual developer of kidaze. CourseSelectionSystem suffers from a SQL injection vulnerability, which stems from an incorrect manipulation of the parameter cbe in the file /Profilers/PriProfile/COUNT3s7.php, which could lea...
CVE-2025-11033: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the file /Profilers/PriProfile/COUNT3s7.php. The manipulation of the argument cbe leads to sql injection. It is possible to initiate the attack remotel...
Security Bulletin: IBM TRIRIGA Application Platform suseptable to clickjacking (CBE-2017-4015)
Summary TRIRIGA could allow a remote authenticated attacker to hijack the clicking action of the victim, caused by improper validation of user supplied HTTP response header Vulnerability Details CVEID:CVE-2017-4015 DESCRIPTION: McAfee Network Data Loss Prevention could allow a remote authenticate...
cbe-mh.de XSS vulnerability
Open Bug Bounty ID: OBB-318289 Description| Value ---|--- Affected Website:| cbe-mh.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PT-2017-16839
Name of the Vulnerable Software and Affected Versions Fatek CBEH versions prior to V3.6 Build 170215 Fatek CBE versions prior to V3.6 Build 170215 Fatek CM55E versions prior to V3.6 Build 170215 Fatek CM25E versions prior to V3.6 Build 170215 Description A stack-based buffer overflow issue has be...
CVE-2010-5280
The CVE-2010-5280 entry describes a directory traversal (Local File Inclusion) in Joomla!’s Community Builder Enhanced (CBE) component (com_cbe) versions 1.4.8–1.4.10. The vulnerability allows remote attackers to include and execute arbitrary local files by supplying .. in the tabname parameter o...
Joomla A Cool Debate 1.0.3 Local File Inclusion
A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 - Where : From Remote...
Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion
A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 - Where : From Remote...
Joomla Community Builder Enhanced Local File Inclusion
Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...
Joomla! Component Community Builder Enhanced (CBE) 1.4.81.4.91.4.10 - Local File Inclusion Remote Code Execution
Joomla! Component Community Builder Enhanced CBE 1.4.81.4.91.4.10 - Local File Inclusion Remote Code Execution Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be...
Joomla! Component Community Builder Enhanced (CBE) 1.4.8/1.4.9/1.4.10 - Local File Inclusion / Remote Code Execution
Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Risk: High Affected...