CVE-2014-100012

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...

SQL injection vulnerability in the i*** parameter of the us***.php page of the website building system of Xi'an BaiLian Network Technology Co.

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system us.php page i parameters exist SQL injection...

SQL injection vulnerability in the i*** parameter of the pr***.php page of the Suzhou Topps website builder system

Suzhou Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services. Suzhou Topps Web site building system pr.php page i parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

CVE-2018-13123

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=rawview for the /etc/passwd file...

CVE-2018-13123: Exposure of Sensitive Information to an Unauthorized Actor

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=rawview for the /etc/passwd file...

CVE-2014-100012: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...

CVE-2014-2531: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.14 build 577 allows remote authenticated users to execute arbitrary SQL commands via the i parameter in a search action to the 1 NodeWorx , 2 SiteWorx, or 3...

CVE-2011-4624: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2014-4850: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in FoeCMS allows remote attackers to execute arbitrary SQL commands via the i parameter...

CVE-2014-2035

Cross-site scripting XSS vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

Sendy 'i' SQL注入漏洞

Bugtraq ID:65772 Sendy是一款自托管的电子邮件通讯应用。 应用对用户通过'i'提交的参数缺少充分过滤，允许攻击者利用漏洞进行SQL注入攻击，可获得敏感数据库信息或控制应用系统。 0 Sendy 1.1.8.4 目前没有详细解决方案提供： http://sendy.co http://www.example.com/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--...

CVE-2014-2035: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2010-4922: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...

CVE-2010-4637: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in feedlist/handlerimage.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter...

CVE-2009-4497: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program...

CVE-2009-3665: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the 1 i parameter or 2 v parameters in a register action...

CVE-2008-2091: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ipn.php in KubeLabs Kubelance 1.6.4 allows remote attackers to include and execute arbitrary local files via the i parameter...

CVE-2008-0289: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in viewfunc.php in Member Area System MAS 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the se...

CVE-2007-0753

Format string vulnerability in the VPN daemon vpnd in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter...

CVE-2007-0753: Use of Externally-Controlled Format String

Format string vulnerability in the VPN daemon vpnd in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter...