105 matches found
CVE-2024-4595 SEMCMS function.php locate sql injection
A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
CVE-2024-4595: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
CVE-2023-45951
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
Sql injection
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
LyLme Spage SQL Injection Vulnerability
LyLme Spage six zero navigation page is China's six zero LyLme open source a navigation page . Committed to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...
CVE-2023-45951
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
CVE-2023-45951
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
PT-2023-29770 · Unknown · Lylme Spage
Name of the Vulnerable Software and Affected Versions: lylme spage version 1.7.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the $userip parameter at function.php. Recommendations: For lylme spage version 1.7.0, consider restricting...
CVE-2023-45951: Improper Neutralization of Special Elements used in an SQL Command
lylmespage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php...
Sql injection
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
CVE-2023-0707 SourceCodester Medical Certificate Generator App function.php delete_record sql injection
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
CVE-2023-0707: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been rated as critical. Affected by this issue is the function deleterecord of the file function.php. The manipulation of the argument id leads to sql injection. VDB-220346 is the identifier assigned to this...
PT-2023-16464 · Sourcecodester · Sourcecodester Medical Certificate Generator App
Name of the Vulnerable Software and Affected Versions: SourceCodester Medical Certificate Generator App version 1.0 Description: A critical issue has been found in the function delete record of the file function.php. The manipulation of the argument id leads to SQL injection. Recommendations: For...
CVE-2022-32417
PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...
CVE-2022-32417
PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...
CVE-2022-32417
PbootCMS v3.1.2 contains a remote code execution (RCE) vulnerability in parserIfLabel() within function.php, as identified for CVE-2022-32417. The affected software is PbootCMS (core version 3.1.2). Reported impact includes remote code execution with potential full host compromise; CVSS v3.1 vect...
CVE-2022-32417
PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...
CVE-2022-32417: Improper Control of Generation of Code
PbootCMS v3.1.2 was discovered to contain a remote code execution RCE vulnerability via the function parserIfLabel at function.php...
PT-2022-21311
Name of the Vulnerable Software and Affected Versions PbootCMS version 3.1.2 Description A remote code execution issue was discovered in PbootCMS via the parserIfLabel function at function.php. This allows for potential code execution by remote attackers. Recommendations For PbootCMS version 3.1....
CVE-2022-27462: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php...