Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 5:41 a.m.3 views

CVE-2014-100012

SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter...

7.5CVSS8.8AI score0.00523EPSS
Exploits1References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.1 views

SQL injection vulnerability in the i*** parameter of the us***.php page of the website building system of Xi'an BaiLian Network Technology Co.

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. Xi'an Bailian Network Technology Co., Ltd. website building system us.php page i parameters exist SQL injection...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/28 12:0 a.m.1 views

SQL injection vulnerability in the i*** parameter of the pr***.php page of the Suzhou Topps website builder system

Suzhou Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services. Suzhou Topps Web site building system pr.php page i parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.8AI score
Exploits0
OSV
OSV
added 2018/07/03 10:29 p.m.1 views

CVE-2018-13123

onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=rawview for the /etc/passwd file...

9.8CVSS5.9AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2014/02/27 3:55 p.m.1 views

CVE-2014-2035

Cross-site scripting XSS vulnerability in xhr.php in InterWorx Web Control Panel aka InterWorx Hosting Control Panel and InterWorx-CP before 5.0.13 build 574 allows remote attackers to inject arbitrary web script or HTML via the i parameter...

4.3CVSS5.7AI score0.00359EPSS
Exploits3References4
seebug.org
seebug.org
added 2014/02/27 12:0 a.m.19 views

Sendy 'i' SQL注入漏洞

Bugtraq ID:65772 Sendy是一款自托管的电子邮件通讯应用。 应用对用户通过'i'提交的参数缺少充分过滤,允许攻击者利用漏洞进行SQL注入攻击,可获得敏感数据库信息或控制应用系统。 0 Sendy 1.1.8.4 目前没有详细解决方案提供: http://sendy.co http://www.example.com/app?i=1+union+all+select+1,2,3,4,5,6,@@version,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22--...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2007/05/24 10:0 p.m.18 views

CVE-2007-0753

Format string vulnerability in the VPN daemon vpnd in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via the -i parameter...

7.4AI score0.00514EPSS
Exploits5References11
CVE
CVE
added 2006/03/24 2:0 a.m.49 views

CVE-2006-1377

The CVE-2006-1377 entry describes a Cross-site scripting (XSS) vulnerability in img.php for the applications EasyMoblog 0.5.1 and CoMoblog 1.1 , where an attacker can inject arbitrary web script or HTML via the i parameter. The vulnerability is triggered remotely and the impact stated is that the...

4.3CVSS5.7AI score0.03084EPSS
Exploits1References13Affected Software2
Rows per page
Query Builder