CVE-2014-125029

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able ...

CVE-2014-125029

The CVE-2014-125029 entry concerns the ttskch PaginationServiceProvider up to version 0.x. The vulnerability is a SQL injection caused by improper handling of the sort/id parameter in the demo/index.php file. Upgrading to version 1.0.0 fixes the issue (patch 619de478efce17ece1a3b913ab16e40651e1ea...

CVE-2014-125029 ttskch PaginationServiceProvider Demo index.php sql injection

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able ...

CVE-2014-125029: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able ...

PT-2015-6968

Name of the Vulnerable Software and Affected Versions WideImage version 11.02.19 Description A cross-site scripting XSS issue exists in the applyConvolution demo of WideImage, allowing remote attackers to inject arbitrary web script or HTML via the matrix parameter to "demo/index.php"...

CVE-2015-5519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the applyConvolution demo in WideImage 11.02.19 allows remote attackers to inject arbitrary web script or HTML via the matrix parameter to demo/index.php...