CVE-2021-44348

SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php...

CVE-2021-44348

SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php...

TuziCMS SQL注入漏洞

TuziCMS rabbit CMS is a PHP and MySQL based content management system CMS for enterprises. a security vulnerability exists in TuziCMS version v2.0.6, which stems from the id parameter in AppManageControllerDownloadController.class.php. No detailed vulnerability details are available at this time...

TuziCMS SQL注入漏洞

TuziCMS Rabbit CMS is a PHP and MySQL based enterprise website content management system. SQL injection vulnerability exists in TuziCMS version v2.0.6, which originates from the id parameter in AppManageControllerAdvertController.class.php, and can be exploited by attackers to vulnerability can b...

The vulnerability of the online shopping system – online-shopping-system-advanced – related to the failure to implement measures to neutralize specific elements, allows a hacker to execute arbitrary SQL code.

The vulnerability of the online-shopping-system-advanced system is related to the failure to eliminate certain special elements during the processing of the /homeaction.php catid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code using a specially...

PT-2021-4989 · Mcafee · Mcafee Policy Auditor

Name of the Vulnerable Software and Affected Versions: McAfee Policy Auditor versions prior to 6.5.2 Description: The issue is related to a Reflected Cross-Site Scripting vulnerability in the web interface of McAfee Policy Auditor. This vulnerability allows a remote unauthenticated attacker to...

CVE-2021-41931

The Company's Recruitment Management System in id=2 of the parameter from viewvacancy app on-page appears to be vulnerable to SQL injection. The payloads 19424269' or '1309'='1309 and 39476597' or '2917'='2923 were each submitted in the id parameter. These two requests resulted in different...

CVE-2021-40260

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities exist in SourceCodester Tailor Management 1.0 via the 1 eid parameter in a partedit.php and b customeredit.php, the 2 id parameter in a editmeasurement.php and b addpayment.php, and the 3 error parameter in index.php...

CVE-2021-24630

The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...

CVE-2021-24630

The Schreikasten WordPress plugin through 0.14.18 does not sanitise or escape the id GET parameter before using it in SQL statements in the comments dashboard from various actions, leading to authenticated SQL Injections which can be exploited by users as low as author...

WordPress SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The WordPress plugin is a WordPress open source application plugin. The WordPress plugin is vulnerable to SQL injection, which stems from the fact that The MAZ Loader plugin does not validate or...

CVE-2021-42670

A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcementsstudent.php web page. As a result a malicious user can extract sensitive data from the web server and in some cases use this vulnerability in order to get a remote code...

CVE-2021-42670

CVE-2021-42670 affects Sourcecodester Engineers Online Portal (PHP) with a SQL injection in the announcements_student.php id parameter. The vulnerability allows an attacker to manipulate SQL queries to extract data from the web server, with potential remote code execution in some scenarios as des...

Engineers Online Portal SQL注入漏洞

Sourcecodester Engineers Online Portal is an open source online portal. sourcecodester Engineers Online Portal in PHP is vulnerable to SQL injection, which can be exploited by attackers to extract sensitive data from the Web server via the id parameter of myclassmates.php, and in some cases...

Exploit for SQL Injection in Engineers_Online_Portal_Project Engineers_Online_Portal

cve-2021-42668 CVE-2021-42668 - SQL Injection vulnerability in...

CVE-2021-41492

Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System POS 1.0 via the 1 Product Code in the pos page in cashiering. 2 id parameter in manageproducts and the 3 t paramater in actions.php...

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

CVE-2020-18262

ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter...

PT-2021-23752 · Unknown · Sourcecodester Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Subscription Website version 1.0 Description: A Cross Site Scripting XSS issue exists due to the id parameter in plan application. This allows for potential malicious script execution. Recommendations: For version 1.0,...