UBUNTU-CVE-2015-8369

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...

pigcms id参数SQL注入漏洞

No description provided by source...

CVE-2015-7348

Cross-site scripting XSS vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to demo/en/asyncData/getNodesForBigData.php...

GLPI Elevation of Privilege Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A security vulnerability exists in GLPI 0.85.2 and earlier versions. The...

UBUNTU-CVE-2015-7685

GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the profilesid parameter to front/user.form.php...

Web Reference Database XML Injection Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. The Web Reference Database unapi.php script fails to adequately filter the 'id' parameter and the sru.php script fails to adequately filter the...

CVE-2015-5076

Multiple cross-site scripting XSS vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 version parameter in protected/views/admin/formEditor.php; the 2 importId parameter in protected/views/admin/rollbackImport.php; the 3 bc, 4 fg,...

Design/Logic Flaw

Web Reference Database aka refbase through 0.9.6 and bleeding-edge before 2015-01-08 allows remote attackers to conduct XML injection attacks via 1 the id parameter to unapi.php or 2 the stylesheet parameter to sru.php...

CVE-2015-6011

CVE-2015-6011 affects the Web Reference Database (refbase) prior to 0.9.6 (and bleeding-edge builds before 2015-01-08). The vulnerability is an XML injection via the unapi.php id parameter or the sru.php stylesheet parameter. Technical detail across connected sources confirms this is an XML injec...

SQL Injection Vulnerability in id Parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the id parameter of the administrative...

SQL Injection Vulnerability in DeptId Parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the DeptId parameter of the administrati...

Sql injection

SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi...

BlueLine Intelligent Collaboration Platform EIS File Containment Vulnerability

BlueLine Intelligent Collaboration Platform EIS is an oa system based on asp.net and SharePoint, which is widely used in various industries. An arbitrary file download vulnerability exists in EIS of BlueLine Intelligent Collaboration Platform. Because the Project/ProjectInfo/DownLoad.aspx page...

SQL Injection Vulnerability in Panmicro Collaborative Business System

Panavision Collaborative Business System is a complete enterprise collaborative work platform. A SQL injection vulnerability exists in the typename and id parameters of the Panmicro Collaborative Business System. It allows attackers to exploit the vulnerability to gain access to sensitive...

Watchguard XCS Arbitrary Command Execution Vulnerability

Watchguard XCS is an all-in-one solution for protection against spam, viruses, corrupted websites, blended threats and cyber-attacks from WatchGuard USA. A security vulnerability exists in Watchguard XCS version 9.2 and build 150522 prior to version 10.0, which stems from the failure of the...

SQL Injection Vulnerability in the ClassID Parameter of Guozidian's Asset Management Information System for Administrative Utilities

The Administrative Utility Asset Management Information System is an asset management information system, in order to standardize and strengthen the management of state-owned asset management information system of administrative institutions, and to improve the level of informationization of...

CVE-2015-5453

Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl...

SQL Injection Vulnerability in the id Parameter of a Government System Developed by Beijing Xiangyu Leader Software Co.

Ltd. is a high-tech enterprise dedicated to the research and development of office software for e-government applications and market development. A SQL injection vulnerability exists in the id parameter of the government system developed by Beijing Xiangyu Leader Software Co., Ltd. which allows...

WatchGuard XCS 'id' OS Injection Vulnerability

WatchGuard XCS is an antivirus and email management security appliance. The WatchGuard XCS WEB interface 'mailqueue.spl' fails to properly handle the 'id' parameter, allowing remote attackers to exploit the vulnerability by submitting a special request to execute arbitrary system commands with...

SQL Injection Vulnerability in Haitian OA System ID Parameter

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...