3 matches found
CVE-2017-17594: Improper Neutralization of Special Elements used in an SQL Command
DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter...
PT-2017-14889
Name of the Vulnerable Software and Affected Versions DomainSale PHP Script version 1.0 Description The issue is related to SQL Injection, which occurs via the id parameter in the "domain.php" endpoint. Recommendations For DomainSale PHP Script version 1.0, avoid using the id parameter in the...
PT-2014-3218
Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS 220 version sg2000-2000.1331 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the fullna...