6824 matches found
CVE-2020-11820
Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the entitiesid parameter...
Advantech WebAccess/NMS DBUtil SQL Injection Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Advantech WebAccess/NMS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of calls to the updateAckedEventlogByID method of the...
The vulnerability of the SiTex development platform’s SiTex-Gosuslu component, related to insufficient protection of the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of the SiTex-Service component of the distributed application development platform SiTex is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by manipulating the...
Canon Oce Colorwave 500 cross-site scripting vulnerability (CNVD-2020-18988)
The Canon Oce Colorwave 500 is a printer from Canon Japan. A cross-site scripting vulnerability exists in the 'settingId' parameter of the settingDialogContent.jsp page of the web application in Canon Oce Colorwave 500 version 4.0.0.0. The vulnerability stems from a lack of proper validation of...
CVE-2019-19615
Multiple XSS vulnerabilities exist in the Backup & Restore module \ v14.0.10.2 through v14.0.10.7 for FreePBX, as shown at /admin/config.php?display=backup on the FreePBX Administrator web site. An attacker can modify the id parameter of the backup configuration screen and embed malicious XSS cod...
CVE-2020-8436
XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rmformid, rmtr, or formname parameter...
SQL Injection Vulnerability in Manage.php of Jinwei Smart Restaurant System Version 0.7.2
Jinwei Smart Restaurant System is a free restaurant management software. It is suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. SQL injection vulnerability exists in manage.php in...
fauzantrif eLection SQL Injection Vulnerability
fauzantrif eLection is a web-based election system. A SQL injection vulnerability exists in fauzantrif eLection 2.0. An attacker can exploit this vulnerability to achieve remote code execution via the admin/ajax/opkandidat.php id parameter...
Sql injection
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
CVE-2020-9340
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
CVE-2020-9340
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
Unspecified Vulnerability in WordPress Ultimate Member
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ultimate Member plugin is one of the plugins used to create member sites or online communities. An unspecified vulnerability exists in...
CVE-2011-5020
An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011...
Sql injection
An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011...
CVE-2011-5020
An SQL Injection vulnerability exists in the ID parameter in Online TV Database 2011...
CVE-2020-5510
PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...
Sql injection
PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file...
PT-2020-18487
Name of the Vulnerable Software and Affected Versions PHPGurukul Hostel Management System version 2.0 Description The issue allows SQL injection via the id parameter in the "full-profile.php" file. This could potentially be exploited to extract or modify sensitive data. Recommendations For...
Arbitrary File Download Vulnerability in Website Building System of Shanghai Zhongke Network Information Technology Co.
Ltd. is engaged in the information technology field of Internet network services and network business application research including e-commerce, commercial website planning and web design, etc.. Shanghai Zhongke Network Information Technology Co., Ltd. station building system exists arbitrary fil...