PT-2022-9610

Name of the Vulnerable Software and Affected Versions WPcalc WordPress plugin versions 2.1 and earlier Description The issue is related to an authenticated SQL Injection vulnerability. It occurs because the plugin does not sanitize user input into the did parameter, which is then used in a SQL...

CVE-2021-25054: Improper Neutralization of Special Elements used in an SQL Command

The WPcalc WordPress plugin through 2.1 does not sanitize user input into the 'did' parameter and uses it in a SQL statement, leading to an authenticated SQL Injection vulnerability...

CVE-2021-24628

The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL statement, when deleting a form in the admin dashboard, leading to an authenticated SQL injection...

CVE-2021-24628

The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL statement, when deleting a form in the admin dashboard, leading to an authenticated SQL injection...

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Unlimited PopUps plugin in version 4.5.3 and earlier suffers from a SQL injection vulnerability that...

PT-2021-16147

Name of the Vulnerable Software and Affected Versions Unlimited PopUps WordPress plugin versions 4.5.3 and earlier Description The issue is related to an authenticated SQL Injection. It occurs because the did GET parameter is not properly sanitised or escaped before being used in a SQL statement...

WordPress SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress Wow Forms plugin in version 3.1.3 and earlier, which stems fr...

CVE-2016-8593

Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a .. dot dot in the dID parameter...

PT-2017-9712

Name of the Vulnerable Software and Affected Versions Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and earlier Description The issue allows remote authenticated users to execute arbitrary code via a .. dot dot in the dID parameter in the upload.cgi. Recommendations For versions...

Joomla com_registrationpro plugin 'did' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'did' parameter of the Joomla comregistrationpro plugin. An attacker can exploit the vulnerability to access or modify database data...

CVE-2007-4509: Undefined Security Weakness

SQL injection vulnerability in index.php in the EventList component comeventlist 0.8 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the did parameter in a details action...

CVE-2006-6873: Undefined Security Weakness

Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via 1 the did parameter in a a viewdisk operation diskusi mod, or the 2 cid parameter in a b viewlink katalog mod or b viewcat diskusi mod operation...

CVE-2006-6243

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6243

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6243: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6194

Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...

CVE-2006-6194: Undefined Security Weakness

Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the 1 cat or 2 did parameter...