6849 matches found
Generalized SQL Injection Vulnerability in BlueLine Intelligent Collaboration Platform of Shenzhen Weida Software Co.
Shenzhen Lanling Software Co., Ltd. is the first enterprise in China to research knowledge management and promote the construction of knowledge-based platform to provide solutions for customers. A SQL injection vulnerability exists in the EIS of the BlueLine Intelligent Collaboration Platform...
WordPress plugin Google Maps 'id' parameter cross-site scripting vulnerability
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Google Maps 'id' parameter due to the...
Arbitrary File Download Vulnerability in ZTE ZXECS EBG2800
The ZXECS EBG2800 is a converged communications product that integrates data, voice, security, behavior management and rich value-added business applications into a single system, providing a variety of functions required by enterprises in a modular format. An arbitrary file download vulnerabilit...
Mediaone 'id' Parameter SQL Injection Vulnerability
MediaOne is a multi-window fusion controller of the famous American company dVision. The advantage of this multi-window fusion controller called picture splicer in China is that it integrates multi-window picture-in-picture function, image edge fusion and surface geometric correction function, an...
Huge-IT Slideshow Cross-Site Scripting Vulnerability
Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /views/slideshow/tmpl/default.php file is vulnerable to cross-site scripting. The vulnerability can be exploit...
Sql injection
Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the 1 ID or 2 Branch parameter...
Uber: SQL Injection on sctrack.email.uber.com.cn
Hi, Uber Security team I just traveled to China, when I call Uber in China. I received an advertisement mail from Uber and I found the unsubscribe link is different from the original unsubscribe link, and there is a SQL Injection under the unsubscribe link. You can see where to find the unsubscri...
Farmers-government system jwhxq. aspx parameter id SQL injection vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase import re class TestPOCPOCBase: vulID = '1' ssvid version = '1.0' author = 'kikay' vulDate = '2015-03-04'...
The vulnerability of the Linux operating system, which allows a malicious individual to increase their privileges
A local user can increase their privileges by passing a parameter vcpuid with a high value...
CVE-2016-4309
Session fixation vulnerability in Symphony CMS 2.6.7, when session.useonlycookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter...
Goku CRM /App/Lib/Action/UserAction.class.php user_id parameter SQL injection
No description provided by source...
Zhengzhou Rocky Electronic Technology Co., Ltd. 686 WeChat CPS distribution system id parameter has SQL injection vulnerability
686 WeChat CPS distribution system is a CPS advertising platform system that connects merchants and promoters, promoters, WeChat public platform traffic owners by registering on the platform to promote the goods released by the merchants, the goods sold to get commission. Zhengzhou Rocky Electron...
Kechuang interconnection CMS /cctrl/admin/news/contShow. php file id parameter SQL injection vulnerability
No description provided by source...
SQL Injection Vulnerability in F_ID Parameter of Vkflash Image Rotation Management System
Vkflash Picture Rotation Management System is a set of Flash picture rotation management system based on RuoChi's Bcastr processing and secondary development. Vkflash image rotation management system FID parameter SQL injection vulnerability, allowing attackers to exploit the vulnerability to...
CVE-2015-7360
Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...
Eight Webcom CMS SQL Injection Vulnerability
Eight Webcom CMS 2016 Q2 has a sql injection vulnerability. An injection point exists in the 'id' and 'newsid' parameters of the 'content.php' page. An attacker is able to execute malicious sql commands to connect to dbms...
Accellion File Transfer Appliance SQL Injection Vulnerability
Accellion File Transfer Appliance FTA is a file transfer solution from Accellion USA. The solution supports file transfer, file sharing, file transfer tracking and reporting, and more. Accellion FTA A SQL injection vulnerability exists in the home/seos/courier/securitykey2.api file in versions...
CVE-2016-2351
SQL injection vulnerability in home/seos/courier/securitykey2.api on the Accellion File Transfer Appliance FTA before FTA91240 allows remote attackers to execute arbitrary SQL commands via the clientid parameter...
SQL Injection Vulnerability in the 'id' parameter of the mining system of Shenzhen Jishu Communication Co.
Ltd. is a communication enterprise providing communication services and communication products. A SQL injection vulnerability exists in the program mining system of Shenzhen Jishu Communication Co. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obta...