Workable Zone 1.1 Database Disclosure

============================================================================================================================ | Title : Workable Zone v1.1 Human Resource Management System data base Disclosure Vulnerability | | Author : indoushka | | email : [email protected] | | Tested on :...

Simple ASC CMS 1.2 Database Disclosure

======================================================================== | Title : Simple ASC CMS 1.2 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Vendor : http://www.aspsource.org...

PHP Web Stat 4.5.03 Database Disclosure

======================================================================== | Title : php web stat v4.5.03 Data Base Disclosure vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 10 FranASSais V.Pro | Version : v4.5.03 | Vendor : http://wmscripti.com/ | Dork ...

Sql injection

A SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL Injection vulnerability has been identified, which an attacker can leverage to disclose sensitive information from the database...

[SECURITY] [DSA 4047-1] otrs2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4047-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 23, 2017 https://www.debian.org/security/faq -...

OpenEMR < 5.0.0 Patch 5 Database Disclosure Vulnerability

OpenEMR is prone to a database disclosure vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr";...

IBOS Enterprise Collaboration Management Software WeiboController.php page actionFollowing function has SQL injection vulnerability

IBOS Enterprise Collaboration Management Software is a PHP-based collaborative office management system. A SQL injection vulnerability exists in the WeiboController.php page of IBOS Enterprise Collaboration Management Software. An attacker is allowed to exploit the vulnerability to obtain sensiti...

Ocean CMS \admin\admin_collect.php page type parameter has SQL injection vulnerability

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS \admin\admincollect.php page type parameter SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information and can...

iWebShop open source mall system id parameters exist SQL injection vulnerability

iWebShop is an open source WEB e-commerce B2B2C platform self-supporting + merchants stationed station-building system based on PHP language + MYSQL database development, using the MVC architecture Yii framework thinking design pattern carefully designed a product. iWebShop open source mall syste...

Memory corruption

The entry details view function in KeePass version 1.32 inadvertently decrypts certain database entries into memory, which may result in the disclosure of sensitive information...

SQL injection vulnerability in the uid parameter in the admin_members.php page of the Ocean CMS website builder system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the /admin/adminmembers.php page of the Ocean CMS system. The lack of filtering of the "uid" parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in mallbuilder frontend cate_show_ajax.php page

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the mallbuilder v7.3.4 frontend cateshowajax.php page due to a lack of filtering of the '$catid' parameter, which allows an attacker to exploit the vulnerability to obtain...

SQL Injection Vulnerability in Webkravat Content Management System ic.php Page

Webkrava is a small cms system by php+mysql. A SQL injection vulnerability exists in the ic.php page of the Webkravat content management system. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

Sql injection

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator ePO 5.3.2 and earlier and 5.1.3 and earlier allows attackers to alter a SQL query, which can result in disclosure of information within the database or impersonation of an agent without authentication via a...

Multi-meter (DuomiCms) movie and television management system type and order parameters SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'type' and 'order' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from th...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

Sql injection

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

CVE-2016-9272

Exponent CMS before version 2.4.0 contains a blind SQL injection via the rerank array parameter that can lead to partial database information disclosure and denial of service. This is documented across CVE-2016-9272 entries (NVD, CNVD/OSV). The core issue is an injectable parameter in the rerank ...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

ASP Gateway 1.0.0 Database Disclosure

======================================================================== | Title : ASP Gateway 1.0.0 Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 1.0.0 | Vendor :...