CVE-2024-13477

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2024-13480 LTL Freight Quotes – For Customers of FedEx Freight <= 3.4.1 - Unauthenticated SQL Injection

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

CVE-2024-13490: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – XPO Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 4.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2024-13480: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – For Customers of FedEx Freight plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.4.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation o...

CVE-2024-13531: Improper Neutralization of Special Elements used in an SQL Command

The ShipEngine Shipping Quotes plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 1.0.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

CVE-2024-13475: Improper Neutralization of Special Elements used in an SQL Command

The Small Package Quotes – UPS Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 4.5.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

CVE-2024-13473: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – Worldwide Express Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameter in all versions up to, and including, 5.0.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-13532: Improper Neutralization of Special Elements used in an SQL Command

The Small Package Quotes – Purolator Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' and 'dropshipeditid' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2024-13477: Improper Neutralization of Special Elements used in an SQL Command

The LTL Freight Quotes – Unishippers Edition plugin for WordPress is vulnerable to SQL Injection via the 'editid' parameter in all versions up to, and including, 2.5.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

Design/Logic Flaw

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

CVE-2017-17981

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

CVE-2017-17984

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...

CVE-2017-17981

The CVE-2017-17981 entry applies to PHP Scripts Mall Muslim Matrimonial Script, where an XSS vulnerability exists via the admin/slider_edit.php edit_id parameter. The issue is documented across multiple sources (e.g., CNVD/CVE/NVD references) as a cross-site scripting flaw related to that paramet...

CVE-2017-17981

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

CVE-2017-17984

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...

CVE-2017-17981: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slideredit.php editid parameter...

CVE-2017-17984: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/eventedit.php editid parameter...

CVE-2009-3514

Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via 1 the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 2 editid and 3 p parameter in a news action to...

Sql injection

Multiple SQL injection vulnerabilities in d.net CMS allow remote attackers to execute arbitrary SQL commands via 1 the page parameter to index.php; and allow remote authenticated administrators to execute arbitrary SQL commands via the 2 editid and 3 p parameter in a news action to...

CVE-2005-3826: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 editid, 2 faqid, and 3 cid parameters in a query string, and 4 the search engine, possibly involving the searchstring parameter...