3 matches found
CVE-2017-14601: Improper Neutralization of Special Elements used in an SQL Command
Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $GET'forwhat', resulting in Information Disclosure...
PT-2017-13573
Name of the Vulnerable Software and Affected Versions Pragyan CMS version 3.0 Description The issue is related to a Boolean-based SQL injection, which can lead to Information Disclosure. This occurs in the cms/admin.lib.php file via the forwhat variable in the $ GET request. Recommendations For...
CVE-2006-5720: Undefined Security Weakness
SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter...