Joomla Topics 1.6 SQL Injection

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

Fully Featured News CMS 1.0 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: NewsBee - Fully Featured News CMS Script v1.0 - SQL Injection Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy:...

Viral Fun Facts Sharing Script 1.1.0 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Flippy DamnFacts – Viral Fun Facts Sharing Script v1.1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

GeniXCMS Posts.class.php Page id Parameter SQL Injection Vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. An SQL injection vulnerability exists in the id parameter of the GeniXCMS Posts.class.php page. A remote...

CVE-2017-5519

SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter...

SQL Injection Vulnerability in the 'id[]' Parameter of Business Easy CMS

Shangyi CMS, or 31cms for short, is a drop-in microsoft public platform management system. A SQL injection vulnerability exists in Business Easy CMS. The lack of filtering of the 'id' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

Sql injection

SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php...

DoraCMS Cross-Site Scripting Vulnerability

DoraCMS is based on Nodejs + express + mongodb written a content management system . A cross-site scripting vulnerability exists in the id parameter of the getNodes.php page of DoraCMS, which can be exploited by an attacker to steal cookie-based authentication or inject malicious scripts...

CVE-2016-10037

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id aka dir parameter, related to browser/directory/getlist...

SQL Injection Vulnerability in the uuid Parameter of Shenzhen Siquan CRM System

Ltd. is engaged in OA, CRM, ERP, HRM, enterprise mailbox system consulting and services. SQL injection vulnerability exists in the uuid parameter of the Shenzhen SiQuan CRM system. Allows attackers to exploit the vulnerability to obtain sensitive database information...

SPIP cross-site scripting vulnerability (CNVD-2016-13015)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in the /ecrire/exec/pucestatut.php file in SPIP 3.1.x. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML wit...

UBUNTU-CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

Resaneh Pardaz Pars SQL Injection Vulnerability

Resaneh Pardaz Pars is a web solution product from parsmedia. An SQL injection vulnerability exists in the id parameter of the category.php page of Resaneh Pardaz Pars, which can be exploited by an attacker to compromise the application, access or modify data, or exploit a potential vulnerability...

SQL Injection Vulnerability in id Parameter of Digital Campus Management System of Shanghai Pengda Computer System Development Co.(CNVD-2017-02002)

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. The digital campus management system of Shanghai Pengda Computer System Development Co. pages are vulnerable to a SQL injection...

SQL Injection Vulnerability in Digital Campus Management System type=Detail&FileId Parameter of Shanghai Pengda Computer System Development Co.

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. SQL injection vulnerability exists in the Digital Campus Management System/BG/GRBG/FileManage/FileUPload.aspx page of Shanghai Pengd...

SQL Injection Vulnerability in DBSHOP_0.9.3_Beta Frontend

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta front SQL injection vulnerability . Due to /module/Shopfront/src/Shopfront/Controller/ArticleController.php at the id parameter spliced into the infoArticle failed to use quotation marks filter ,...

SQL Injection Vulnerability in VOA (Pengwei) System RelationID Parameter

Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system relationID parameter exists SQL injection vulnerability, the vulnerability URL is...

SQL Injection Vulnerability in Baishuo Networks CMS Management System

The cms management system is a content management system for text processing, image processing, flash animation, sound and video streaming, images and even email archives. Baishuo network cms management system has SQL injection vulnerability, id parameter filtering is not strict leading to sql...

Peel Shopping Object Injection Vulnerability

PEEL SHOPPING is an online shopping mall program. A security vulnerability exists in Peel SHOPPING version 8.0.2. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the id parameter...