SQL injection vulnerability in the 'id' parameter of the CMS system of Changchun Beichen Network Technology Co.

Changchun Beichen Network Technology Co., Ltd CMS station building system is a government website construction system in Jilin Province. A SQL injection vulnerability exists in the Changchun Beichen Network Technology Co Ltd CMS builder system. The lack of filtering of the 'id' parameter allows a...

Hope Technology enterprise website management system id parameter has SQL injection vulnerability

Hope Technology Enterprise Website Management System is a content management system developed by Anhui Hope Network Technology Co. based on ThinkPHPCMS. Hope Technology enterprise website management system id parameters exist SQL injection vulnerability, attackers can use the vulnerability to...

Vulnerability in orderid parameter of China Telecom's handheld business hall app mall order page.

China Telecom Pocket Business Office is a cell phone terminal-based application software that provides users with recharge and payment, cost inquiries and other services. There is a vulnerability in the orderid parameter of the order page of the China Telecom Palm Business Hall app, which allows ...

Ke361 V1.0.706 SQL Injection Vulnerability in id Parameter of 'detail()' Function

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modularity, drive and...

CVE-2017-7387

TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php episodeID parameter...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-04905)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. Revive Adserver has a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to...

Joomla! OpenCart Component SQL Injection Vulnerability

Joomla! is a content management system which is quite famous in foreign countries.OpenCart is a system component for product management in Joomla! A SQL injection vulnerability exists in the productid parameter of the Joomla! OpenCart index.php page, which can be exploited by attackers to access ...

SQL Injection Vulnerability in Webkravat Content Management System ic.php Page

Webkrava is a small cms system by php+mysql. A SQL injection vulnerability exists in the ic.php page of the Webkravat content management system. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

SQL Injection and Reflective Cross-site Scripting Vulnerabilities in Topps Enterprise Website Builder System

Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services for enterprises in Suzhou and the surrounding areas. Topps enterprise website builder system suffers from SQL injection and reflective cross-site scripting vulnerabilities. Due to the...

Joomla com_eventlist plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comeventlist plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_easyblog parameter 'id' plugin SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla comeasyblog parameter 'id' plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_kunena plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comkunena plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_sngevents plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comsngevents plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla! Component Advertisement Board 3.0.4 - id SQL Injection

Joomla! Component Advertisement Board 3.0.4 - id SQL Injection Exploit Title: Joomla! Component Advertisement Board v3.0.4 - SQL Injection Google Dork: inurl:index.php?option=comadvertisementboard Date: 14.03.2017 Vendor Homepage: http://ordasoft.com/ Software :...

CVE-2017-6812

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...

CVE-2017-6811

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.shop.php id parameter...

Cross site scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6808

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.faq.php id parameter...

CVE-2017-6809

MaNGOSWebV4 4.0.8 is described as vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter). This CVE entry references a reflected XSS condition without provided exploit steps or remediation details in the connected documents. NVD lists a MEDIUM overall impact (CVS...

CVE-2017-6575

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...