Command injection

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the editprofilefirstname parameter to user/editprofile...

CVE-2017-17904: Improper Neutralization of Input During Web Page Generation

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the editprofilefirstname parameter to user/editprofile...

CVE-2017-17903: Cross-Site Request Forgery (CSRF)

FS Lynda Clone has CSRF via user/editprofile, as demonstrated by adding content to the user panel...

CVE-2017-17904

FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the editprofilefirstname parameter to user/editprofile...

CVE-2017-17904

FS Lynda Clone is affected by a cross-site scripting (XSS) vulnerability CVE-2017-17904. The issue arises via the keywords parameter to tutorial/ and the edit_profile_first_name parameter to user/edit_profile, enabling injected scripts to run in a victim’s browser. Sources confirm the vulnerabili...

CVE-2017-17903

FS Lynda Clone has CSRF via user/editprofile, as demonstrated by adding content to the user panel...

CVE-2017-17903

CVE-2017-17903 affects FS Lynda Clone (video tutorial software) and is caused by a cross-site request forgery (CSRF) vulnerability in the /user/edit_profile endpoint, allowing an attacker to cause changes to the user panel by forging requests. The vulnerability’s impact is described in the initia...

PT-2017-15087

Name of the Vulnerable Software and Affected Versions FS Lynda Clone affected versions not specified Description The issue allows for CSRF via the "user/edit profile" API endpoint, as demonstrated by adding content to the user panel. Recommendations At the moment, there is no information about a...

PT-2017-15088

Name of the Vulnerable Software and Affected Versions FS Lynda Clone affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the keywords parameter to the "tutorial/" endpoint or the edit profile...

FS Lynda Clone SQL Injection Vulnerability

FS Lynda Clone is a set of scripts for video learning websites written using the PHP Codelgniter framework. A SQL injection vulnerability exists in FS Lynda Clone version 1.0. A remote attacker can exploit the vulnerability by sending the 'keywords' parameter to tutorial/ to inject SQL commands...

Sql injection

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

CVE-2017-17643

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

CVE-2017-17643

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

CVE-2017-17643

FS Lynda Clone 1.0 suffers a SQL Injection in the keywords parameter of tutorial/, enabling arbitrary SQL execution. This vulnerability is described across multiple sources (CVE-2017-17643, CNVD-2018-01351, NVD entry) and is associated with FS Lynda Clone built on PHP CodeIgniter. Public referenc...

CVE-2017-17643: Improper Neutralization of Special Elements used in an SQL Command

FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/...

PT-2017-14939

Name of the Vulnerable Software and Affected Versions FS Lynda Clone version 1.0 Description The issue is related to SQL Injection, which occurs via the keywords parameter to the "tutorial/" endpoint. Recommendations For FS Lynda Clone version 1.0, avoid using the keywords parameter in the...

FS Amazon Clone SQL Injection Vulnerability

FS Amazon Clone is a suite of e-commerce web scripts based on PHP and MySQL. A SQL injection vulnerability exists in FS Amazon Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...

SUSE SLES12 Security Update : kernel (SUSE-SU-2017:3308-1)

This update for the Linux Kernel 3.12.61-5266 fixes several issues. The following security issues were fixed : - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrmuser.c allowed local users to gain privileges or cause a denial of service use-after-free via a crafted SORCVBUF...

FS Expedia Clone SQL Injection Vulnerability

FS Expedia Clone is an online travel reservation management system based on PHP and MySQL. The system supports booking of airline tickets, hotel reservations and car rentals via the Internet or telephone agents. A SQL injection vulnerability exists in FS Expedia Clone version 1.0. A remote attack...

FS Ebay Clone SQL Injection Vulnerability

FS Ebay Clone is an online auction and shopping website script based on PHP and MySQL. A SQL injection vulnerability exists in FS Ebay Clone version 1.0. A remote attacker can inject SQL into the product.php file by sending the 'id' parameter to the product.php file, or the search.php file by...