EUVD-2019-15861

Malware in sbrugna...

EUVD-2019-15860

Malware in sbrugna...

CVE-2019-6296

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

CVE-2019-6295

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...

Cleanto SQL Injection Vulnerability

Cleanto is an online booking system developed specifically for cleaning service companies. A SQL injection vulnerability exists in Cleanto version 5.0, which can be exploited by remote attackers to execute SQL commands with the 'serviceid' parameter...

CVE-2019-6295

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...

CVE-2019-6296

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

Sql injection

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...

CVE-2019-6296

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

Sql injection

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

CVE-2019-6295

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...

CVE-2019-6295

CVE-2019-6295 affects Cleanto 5.0, with a SQL Injection vulnerability exploitable via the assets/lib/service_method_ajax.php service_id parameter. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, CVE lists) and described as a SQLi in Cleanto 5.0. The provided data does not inclu...

CVE-2019-6296

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

CVE-2019-6295

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...

CVE-2019-6296

CVE-2019-6296 affects Cleanto 5.0. The vulnerability is a SQL injection in the assets/lib/export_ajax.php id parameter, enabling a crafted input to alter queries. The CVSS data indicate high severity (CVSS v3 base score 9.8, CRITICAL, with Network attack, no authentication, and impacts to confide...

CVE-2019-6295: Improper Neutralization of Special Elements used in an SQL Command

Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...

CVE-2019-6296: Improper Neutralization of Special Elements used in an SQL Command

Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...

Cleanto 5.0 SQL Injection

Exploit Title: Cleanto 5.0 - SQL Injection Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://skymoonlabs.com/ Software Link: https://codecanyon.net/item/appointment-booking-software-for-cleaning-maintenance-businesses-cleanto/18397969 Version: 5.0 Category: Webapps...

PT-2019-18082

Name of the Vulnerable Software and Affected Versions Cleanto version 5.0 Description The issue is related to SQL Injection via the service id parameter in the "assets/lib/service method ajax.php" API endpoint. Recommendations For Cleanto version 5.0, avoid using the service id parameter in the...

PT-2019-18083

Name of the Vulnerable Software and Affected Versions Cleanto version 5.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "assets/lib/export ajax.php" API endpoint. Recommendations For Cleanto version 5.0, avoid using the id parameter in the...