Sql injection

An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $GET'del', as demonstrated by an admin/page/system/nav.php?del= URI...

CVE-2019-11567

An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $GET'del', as demonstrated by an admin/page/system/nav.php?del= URI...

CVE-2019-11567: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in AikCms v2.0. There is a SQL Injection vulnerability via $GET'del', as demonstrated by an admin/page/system/nav.php?del= URI...

PT-2019-12385

Name of the Vulnerable Software and Affected Versions AikCms version 2.0 Description An issue was discovered in AikCms, where there is a SQL Injection vulnerability. This can be exploited via the del variable in the $ GET request, as demonstrated by accessing the /admin/page/system/nav.php endpoi...

Register for #CBConnect19 in San Diego Using Code SOCIAL50 to Receive 50% Off

In two months, hundreds of security professionals will gather in San Diego for two days of discussion around the future of endpoint security at CB Connect 2019. The event will take place at Hotel Del Coronado June 4-5 with sweeping views of Coronado beach where attendees will hear from robust...

PT-2019-18732

Name of the Vulnerable Software and Affected Versions C.P.Sub versions prior to 5.3 Description The issue allows for CSRF attacks. This can be achieved via a "manage.php?p=article del&id=" URI. Recommendations For versions prior to 5.3, update to version 5.3 or later to resolve the issue...

PT-2019-18653

Name of the Vulnerable Software and Affected Versions PbootCMS version 1.3.6 Description A CSRF issue was discovered that can lead to the deletion of users. This occurs via the "admin.php/User/del/ucode/" API endpoint. Recommendations For PbootCMS version 1.3.6, consider disabling access to the...

CVE-2019-7570: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability was found in PbootCMS v1.3.6 that can delete users via an admin.php/User/del/ucode/ URI...

A city in Texas is using paper after suffering ransomware attack

By Waqas Another day, another devastating ransomware attack; this time, computers at The City Hall of Del Rio, Texas have suffered a massive ransomware attack forcing authorities to completely shut down the targeted network. The attack took place on Thursday, January 10th after which the City's...

VUEMUIAgent not launching when login to Windows right away after getting Ctrl+Alt+Del

VUEMUIAgent not launching after login to user session right away after getting to Ctrl+Alt+Del. When waiting for about two minutes at Ctrl+Alt+Del without login, and then after the two minutes we login, then the VUEMUIAgent launches fine...

PT-2018-15260

Name of the Vulnerable Software and Affected Versions zzzphp cms version 1.5.8 Description An issue was discovered that allows remote attackers to delete arbitrary files. This is possible due to the del file function in the /admin/save.php endpoint, which can be exploited by using a mixed-case...

CVE-2018-1002000

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the delids variable by POST request...

PT-2018-9608

Name of the Vulnerable Software and Affected Versions: WordPress Arigato Autoresponder and Newsletter version 2.5.1.8 Description: The issue is related to a blind SQL injection vulnerability that can be exploited via the del ids variable by sending a POST request. This vulnerability requires...

PT-2018-14909

Name of the Vulnerable Software and Affected Versions DiliCMS version 2.4.0 Description A CSRF issue allows deletion of a user or group via specific URIs, such as "admin/index.php/user/del/1" or "admin/index.php/role/del/2". Recommendations For DiliCMS version 2.4.0, as a temporary workaround,...

CVE-2018-19291: Cross-Site Request Forgery (CSRF)

An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI...

PT-2018-14881

Name of the Vulnerable Software and Affected Versions LAOBANCMS version 2.0 Description An issue in LAOBANCMS allows arbitrary file deletion via directory traversal in the "admin/pic.php" endpoint, specifically using the del parameter. This can be exploited to delete sensitive files, such as...

PT-2018-14486

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description An issue exists in the software, allowing SQL injection via the "admin.php?mod=user&act=del" API endpoint, specifically through the user id parameter. Recommendations For PHPSHE version 1.7, avoid using the user ...

CVE-2018-18485: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in PHPSHE 1.7. admin.php?mod=db&act=del allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter. This can be leveraged to reload the product by deleting install.lock...

PT-2018-14485

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description An issue was discovered that allows remote attackers to delete arbitrary files via directory traversal sequences in the dbname parameter in the "admin.php?mod=db&act=del" API endpoint. This can be leveraged to...

CVE-2017-2590

A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of servic...