6843 matches found
CVE-2017-6577
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...
CVE-2017-6571
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id...
JUX EventOn component id parameter SQL injection vulnerability
Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the id parameter of the JUX EventOn component of Joomla! An attacker can...
CVE-2017-6544
Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/wwwadmin/users.php id parameter...
CVE-2017-6509
Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...
Cross site scripting
Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...
CVE-2017-6509
Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...
Joomla! Component JO Facebook Gallery v4.5 - SQL Injection
Joomla! Component JO Facebook Gallery v4. 5 - SQL Injection index. php id parameter into the SQL statement exist GET the type of injection Injection point: http://localhost/PATH/index. php? option=comjofacebookgallery&view=category&id=SQL http://localhost/PATH/index. php?...
Joomla! Component AYS Quiz 1.0 - 'id' SQL Injection
Exploit Title: Joomla! Component AYS Quiz v1.0 - SQL Injection Google Dork: inurl:index.php?option=comaysquiz Date: 04.03.2017 Vendor Homepage: http://ays-pro.com/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/ays-quiz/ Demo:...
Recipe Manager Component 'id' Parameter SQL Injection Vulnerability
Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the 'id' parameter of the Recipe Manager component of Joomla! which can be exploited by attackers to access or modify database data...
Joomla com_news component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comnews component. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_phocadownload component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comphocadownload component. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_remository component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comremository component. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_k2 component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comk2 component. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_glossary component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comglossary component. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_civicrm component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comcivicrm component. An attacker can exploit the vulnerability to access or modify database data...
SQL Injection Vulnerability in 'id' Parameter of Single Point CRM System
Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...
CVE-2014-9916
Multiple cross-site scripting XSS vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 tribename or 2 tags parameter in a tribes page request to user/ or the 3 userid or 4 fullname parameter to signup.php...
Joomla EShop component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla EShop component, which allows remote, unauthenticated attackers to execute arbitrary SQL commands via the parameter...
Joomla com_topics component 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comtopics component. An attacker can exploit the vulnerability to access or modify database data...