PT-2021-11586

Name of the Vulnerable Software and Affected Versions: InoERP version 0.7.2 Description: The issue allows an unauthorized attacker to execute arbitrary code on the server side due to a lack of validations in the /modules/sys/form personalization/json fp.php API endpoint. Recommendations: For InoE...

CVE-2011-3838

Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 u parameter to fp.php, 2 epage parameter to newpage.php, 3 epost parameter to newpost.php, and 4 username parameter to login.php in admin/; or the 5 username parameter to...

PT-2011-4722

Name of the Vulnerable Software and Affected Versions Wuzly version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the u parameter to "fp.php", the epage parameter to "newpage.php", the epost parameter to...

CVE-2011-3838: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 u parameter to fp.php, 2 epage parameter to newpage.php, 3 epost parameter to newpost.php, and 4 username parameter to login.php in admin/; or the 5 username parameter to...