Lucene search
+L

407 matches found

CNVD
CNVD
added 2019/05/15 12:0 a.m.3 views

SQL injection vulnerability in the cid parameter of the ne***.asp page of the website builder system of Chengdu Power Infinite Technology Co.

Chengdu Power Unlimited Technology Co., Ltd. is an Internet company that builds marketing websites and Internet marketing services for small and medium-sized enterprises. Chengdu Power Infinite Technology Co., Ltd. building system ne.asp page cid parameter exists SQL injection vulnerability,...

7.9AI score
SaveExploits0
OSV
OSV
added 2019/04/22 3:29 p.m.4 views

CVE-2019-11452

whatsns 4.0 allows index.php?admincategory/remove.html cid SQL injection...

7.2CVSS7.1AI score0.01276EPSS
SaveExploits1References1
Exploit DB
Exploit DB
added 2018/10/15 12:0 a.m.529 views

KORA 2.7.0 - 'cid' SQL Injection

Exploit Title: KORA 2.7.0 - SQL Injection Dork: N/A Date: 2018-10-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.matrix.msu.edu/ Software Link: https://sourceforge.net/projects/kora/files/latest/download Version: 2.7.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2018/07/20 12:0 a.m.70 views

MSVOD 10 - cid SQL Injection

MSVOD 10 - cid SQL Injection Exploit Title: MSVOD V10 ¡V SQL Injection Google Dork: inurl:"images/lists?cid=13" Date: 2018/07/17 Exploit Author: Hzllaga Vendor Homepage: http://www.msvod.cc/ Version: MSVOD V10 CVE : CVE-2018-14418 Reference : https://www.wtfsec.org/2583/msvod-v10-sql-injection/...

7.5CVSS0.3AI score0.09076EPSS
SaveExploits3
CNVD
CNVD
added 2018/05/28 12:0 a.m.5 views

PHPMyWind Cross-Site Scripting Vulnerability (CNVD-2018-15387)

PHPMyWind is a PHP + MySQL based development , W3C compliant site building engine for enterprise-level site building . A cross-site scripting vulnerability exists in PHPMyWind version 5.5. A remote attacker can exploit this vulnerability by sending the 'cid' parameter to the newsshow.php page or ...

6.1CVSS6AI score0.00802EPSS
SaveExploits0References1
NVD
NVD
added 2018/05/26 3:29 p.m.19 views

CVE-2018-11487

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

6.1CVSS6AI score0.00802EPSS
SaveExploits0References1
OSV
OSV
added 2018/05/26 3:29 p.m.4 views

CVE-2018-11487

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

6.1CVSS5.8AI score0.00802EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/03/26 12:0 a.m.5 views

Invision Power Services Invision Power Board SQL Injection Vulnerability

Invision Power Services Invision Power Board IPB or IP.Board is a PHP and MySQL based web forum program from Invision Power Services. The program makes it easy to create and manage online forums. A SQL injection vulnerability exists in Invision Power Services IPB. A remote attacker can exploit th...

8.8CVSS8.5AI score0.01095EPSS
SaveExploits0References1
Prion
Prion
added 2018/03/20 9:29 p.m.16 views

Sql injection

SQL injection vulnerability in Invision Power Board aka IPB or IP.Board before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter...

6.5CVSS9.1AI score0.01095EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/03/20 9:0 p.m.17 views

CVE-2014-4928

SQL injection vulnerability in Invision Power Board aka IPB or IP.Board before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter...

9.2AI score0.01095EPSS
SaveExploits0References1
0day.today
0day.today
added 2018/02/17 12:0 a.m.56 views

Joomla Google Map Landkarten 4.2.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Google Map Landkarten = 4.2.3 - SQL Injection Vendor Homepage: http://www.joomla-24.de/ Software Link: https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/google-map-landkarten/...

7.5CVSS9.7AI score0.23973EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2017/08/21 12:0 a.m.25 views

PHP Coupon Script 6.0 - 'cid' SQL Injection

Exploit Title: PHP Coupon Script 6.0 - 'cid' Parameter SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://www.couponscript.com/ Software Link: http://www.couponscript.com/ Demo: http://www.couponscript.com/demo/ Version: 6.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...

7AI score
SaveExploits0
CNVD
CNVD
added 2017/07/30 12:0 a.m.2 views

SQL injection vulnerability in products.php page cid parameter of Shenzhou Tongda website builder system

ShenZhouTongDa network building system is a website building system. A SQL injection vulnerability exists in the cid parameter on the products.php page of the website builder system. An attacker can exploit this vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2017/07/30 12:0 a.m.3 views

SQL injection vulnerability of cid parameter in category.control.mydecms.php page of Xiancheng website builder system

Xiancheng building system is a set of PHP + mysql architecture with free open source article management system program. Xiancheng website building system category.control.mydecms.php page cid parameter SQL injection vulnerability. As the system fails to effectively filter the data submitted by th...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2017/07/29 12:0 a.m.3 views

SQL injection vulnerability in the cid parameter of list.php page of JiuJiu website builder system

Daqing JiuJiu Network Technology Co., Ltd. is a technical service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. There is a SQL injection vulnerability in the cid parameter of the list.php page of the JiuJiu network...

7.7AI score
SaveExploits0
OSV
OSV
added 2017/05/04 4:59 a.m.4 views

CVE-2017-8763

Cross-site scripting XSS vulnerability in modules/Base/Box/checkfornewversion.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter...

6.1CVSS5.9AI score0.00766EPSS
SaveExploits1References1
NVD
NVD
added 2017/05/04 4:59 a.m.11 views

CVE-2017-8763

Cross-site scripting XSS vulnerability in modules/Base/Box/checkfornewversion.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter...

6.1CVSS6AI score0.00766EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/04/28 12:0 a.m.3 views

SQL injection vulnerability in cid parameter of Fangfa CMS FcontentAction.class.php page

Fangfa CMS is a scalable web content management software. A SQL injection vulnerability exists in the cid parameter of the Fangfa CMS V4.0 FcontentAction.class.php page, which can be exploited by an attacker to obtain sensitive information from the database...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2017/03/15 12:0 a.m.4 views

SQL Injection Vulnerability in cid and keyword parameters of KenCMS V1.1 Enterprise Membership Experience Edition System

KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'cid' and 'keyword' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2017/03/02 12:0 a.m.3 views

Joomla com_jdownloads component 'cid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comjdownloads component. An attacker can exploit the vulnerability to access or modify database data...

8AI score
SaveExploits0References1
Rows per page
Query Builder