407 matches found
Joomla com_digistore component 'cid' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comdigistore component. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_djcatalog2 component 'cid' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'cid' parameter of the Joomla comdjcatalog2 component. An attacker can exploit the vulnerability to access or modify database data...
rosettastone.com XSS vulnerability
Vulnerable URL: http://www.rosettastone.com/?cid='"--!confirmOPENBUGBOUNTY...
SQL injection vulnerability in the cid parameter of OpenCourse_new.aspx page of the CMS system of the resource management platform of Beijing Hanboer Information Technology Co.
Resource Management Platform CMS is a comprehensive management and application platform based on the cloud service system, through a multi-layer system architecture, establishing a multi-level cloud platform and cloud application environment covering provinces, municipalities, counties, schools a...
seeklearning.com.au XSS vulnerability
Vulnerable URL: https://www.seeklearning.com.au/providers?cid=...
Days Bo online training system network school Edition Course_Class_List_Default. aspx the parameter cid SQL injection vulnerability
No description provided by source...
WordPress Download Manager Plugin <= 2.2.2 - XSS
This plugin is prone to admin.php cid parameter cross site scripting vulnerability. Solution Update the plugin...
CVE-2015-2183
Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...
CVE-2015-1450
SQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL commands via the cid parameter in a category action to index.php...
CVE-2014-6028
TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...
CVE-2014-6029
CVE-2014-6029 affects TorrentFlux 2.4. The vulnerability arises in the editCookies action to profile.php, where the cid parameter allows remote authenticated users to delete or modify other users’ cookies. Reported impact includes partial integrity risk of cookies; confidentiality/availability im...
CVE-2014-6028
TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...
CVE-2014-6029
TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...
LANAI CMS 1.2.14 EZSHOPINGCART Module cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/25193/info LANAI CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Concrete5 5.6.2.1 (index.php, cID param) - SQL Injection
No description provided by source. Exploit Title: Concrete5 sql injection Date: 18/02/2014 Exploit Author: [email protected] Vendor Homepage: https://www.concrete5.org/ Software Link: http://www.concrete5.org/downloadfile/-/view/58379/8497/ Version: 5.6.2.1 stable Tested on: Virtualbox debian UR...
DCP-Portal 3.7/4.x/5.x news.php cid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency,...
Albinator 2.0.8 dlisting.php cid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...
Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability
This host is installed with Wordpress WP Banners Lite Plugin and is prone to xss vulnerability. OpenVAS Vulnerability Test $Id: gbwordpresswpbannerslitexssvuln.nasl 6086 2017-05-09 09:03:30Z teissa $ Wordpress WP Banners Lite Plugin Cross Site Scripting Vulnerability Authors: Thanga Prakash S...
WordPress WP Banners Lite Plugin Cross Site Scripting Vulnerability
WordPress WP Banners Lite Plugin is prone to an XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...