CVE-2020-21726

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter...

Sql injection

OpenSNS v6.1.0 contains a blind SQL injection vulnerability in /Controller/ChinaCityController.class.php via the cid parameter...

嘉兴想天信息科技 OpenSNS SQL注入漏洞

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL blind injection vulnerability exists in the cid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

CVE-2021-41651

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in processupdateprofile.php...

Sql injection

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in processupdateprofile.php...

CVE-2021-41651

A blind SQL injection vulnerability exists in the Raymart DG / Ahmed Helal Hotel-mgmt-system. A malicious attacker can retrieve sensitive database information and interact with the database using the vulnerable cid parameter in processupdateprofile.php...

CVE-2021-41463

Cross-site scripting XSS vulnerability in toos/permissions/dialogs/access/entity/types/groupcombination.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the cID parameter...

CVE-2021-40921

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-40921

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-40921

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in contactform.inc.php in Detector 0.8.5 and below version allows remote attackers to inject arbitrary web script or HTML via the cid parameter...

CVE-2021-41463

Cross-site scripting XSS vulnerability in toos/permissions/dialogs/access/entity/types/groupcombination.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the cID parameter...

Portlandlabs Concrete5 跨站脚本漏洞

Portlandlabs Concrete5 is an open source content management system CMS from PortlandLabs, Inc. A cross-site scripting vulnerability exists in Portlandlabs Concrete5 crete5-legacy 5.6.4.0 and prior versions, which can be exploited by remote attackers to "cID" parameter to inject arbitrary web scri...

Detector 跨站脚本漏洞

Detector is an open source, simple, Php and JavaScript based browser and feature detection library from the US-based individual developer Dave Olsen. A cross-site scripting vulnerability exists in Detector versions 0.8.5 and below that allows remote attackers to inject arbitrary web script or HTM...

Exploit for SQL Injection in Hotel_Management_System_Project Hotel_Management_System

CVE-2021-41651 CVE-2021-41651 SQL Injection in hotel-mgmt-sys...

Oracle Linux 8 : kernel (ELSA-2021-3447)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-3447 advisory. - KVM: PPC: Book3S: Fix HRTAS rets buffer overflow Jon Maloy 1988225 1988226 CVE-2021-37576 Tenable has extracted the preceding description block...

cid (>=0.3.0, <=0.4.0), cid_fork_rlay (0.3.1) +58 more potentially affected by CVE-2020-35909 via multihash (>=0.8.0, <=0.10.1)

multihash CARGO version =0.8.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.9, =0.0.1-alpha1, =0.0.18 and more Source cves: CVE-2020-35909 Source advisory: OSV:GHSA-H7QH-3H6F-W79P...

Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2021-9410)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-9410 advisory. - seqfile: disallow extremely large seq buffer allocations Eric Sandeen Orabug: 33135633 CVE-2021-33909 - net/mlx4: Fix EEPROM dump support Vladyslav...

SUSE SLES15: kernel-livepatch-5_3_18-24_70-default / etc (SUSE-SU-2021:2487-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2487-1 advisory. This update for the Linux Kernel 5.3.18-2470 fixes several issues. The following security issues were fixed: - CVE-2021-33909: Fixed an...

PHPGurukul Student Record System SQL注入漏洞

PHPGurukul Student Record System is an application that is vulnerable to SQL injection. The vulnerability stems from a lack of validation of external input SQL statements in the cid parameter of edit-course.php, which can be exploited by remote attackers to through to execute arbitrary SQL...