8 matches found
CVE-2014-100012
SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...
SQL injection vulnerability in the i*** parameter of the us***.php page of the website building system of Xi'an BaiLian Network Technology Co.
Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system us.php page i parameters exist SQL injection...
SQL injection vulnerability in the i*** parameter of the pr***.php page of the Suzhou Topps website builder system
Suzhou Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services. Suzhou Topps Web site building system pr.php page i parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
CVE-2018-13123
onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=rawview for the /etc/passwd file...
CVE-2014-2035
Cross-site scripting XSS vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter...
Sendy 'i' SQL注入漏洞
Bugtraq ID:65772 Sendy是一款自托管的电子邮件通讯应用。 应用对用户通过'i'提交的参数缺少充分过滤,允许攻击者利用漏洞进行SQL注入攻击,可获得敏感数据库信息或控制应用系统。 0 Sendy 1.1.8.4 目前没有详细解决方案提供: http://sendy.co http://www.example.com/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--...
CVE-2007-0753
Format string vulnerability in the VPN daemon vpnd in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter...
CVE-2006-1377
The CVE-2006-1377 entry describes a Cross-site scripting (XSS) vulnerability in img.php for the applications EasyMoblog 0.5.1 and CoMoblog 1.1 , where an attacker can inject arbitrary web script or HTML via the i parameter. The vulnerability is triggered remotely and the impact stated is that the...