19 matches found
CVE-2024-13483
CVE-2024-13483 LTL Freight Quotes – SAIA Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3874,1,0x717a627171,3874&wpnonc...
CVE-2024-13479
CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 3.2.4 - 認証されていないSQLインジェクション 説明 WordPress用プラグインLTL Freight Quotes – SEFL...
CVE-2024-13481
CVE-2024-13481 LTL Freight Quotes – R+L Carriers Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3...
CVE-2024-13489
CVE-2024-13489 LTL Freight Quotes – Old Dominion Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT ELT3874=3874,1,0x717a62717...
CVE-2024-13485
CVE-2024-13485 LTL Freight Quotes – ABF Freight Edition = 5.6 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause GTIDSUBSET Payload: action=enwdeditwarehouse&editid=1 AND GTIDSUBSETCONCAT0x7170787171,SELECT...
EUVD-2017-9123
Malware in sbrugna...
CVE-2024-13483
The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...
CVE-2024-13489
The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 4.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...
WordPress plugin Small Package Quotes – USPS Edition SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
CVE-2024-13477
The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...
CVE-2024-13480 LTL Freight Quotes – For Customers of FedEx Freight <= 3.4.1 - Unauthenticated SQL Injection
The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...
Design/Logic Flaw
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...
CVE-2017-17981
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...
CVE-2017-17984
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...
CVE-2017-17984
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...
CVE-2017-17981
PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...
CVE-2017-17981
The CVE-2017-17981 entry applies to PHP Scripts Mall Muslim Matrimonial Script, where an XSS vulnerability exists via the admin/slider_edit.php edit_id parameter. The issue is documented across multiple sources (e.g., CNVD/CVE/NVD references) as a cross-site scripting flaw related to that paramet...
CVE-2009-3514
Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via 1 the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 2 editid and 3 p parameter in a news action to...
Sql injection
Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via 1 the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 2 editid and 3 p parameter in a news action to...