CVE-2017-14761

In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter...

CVE-2017-14762

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter...

CVE-2017-14345

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php...

CVE-2017-14345

CVE-2017-14345 affects the tianchoy/blog project, where a SQL injection is possible through the id parameter to view.php. The vulnerability is described across multiple sources (Red Hat, CNVD, NVD, CVE listings) as existing up to 2017-09-12, with the attack surface being the id parameter passed t...

CVE-2017-14345

SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2017-32848)

Dolibarr ERP/CRM is an open source software/freeware for small and medium-sized businesses, organizations or freelancers. It includes different features such as Enterprise Resource Planning ERP and Customer Relationship Management CRM, as well as applications for other different activities. A SQL...

UBUNTU-CVE-2017-14238

SQL injection vulnerability in admin/menus/edit.php in Dolibarr ERP/CRM version 6.0.0 allows remote attackers to execute arbitrary SQL commands via the menuId parameter...

NexusPHP linksmanage.php file SQL injection vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the linksmanage.php file to inject...

CVE-2017-14076

SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an editlink action...

SQL injection vulnerability in id parameter of website building system of Suzhou Golden Shield Network Technology Co.

Ltd. is mainly engaged in website construction, website promotion, website optimization, enterprise post office, color page samples and other services for Suzhou enterprises. Suzhou Golden Shield Network Technology Co., Ltd. building system id parameters exist SQL injection vulnerability, attacke...

SQL injection vulnerability in the nav_id parameter of the arc.php page of the Yuntrun website builder system

Yuntrue United website builder system is a website builder system SQL injection vulnerability exists in the navid parameter on the arc.php page of the Yuntrun website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in the show.html/show.php page of the website building system of Sichuan Horizontal World Technology Co.

Ltd. is an Internet + solution provider and execution service provider. A SQL injection vulnerability exists in the show.html/show.php page of Sichuan Horizontal World Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, remote attacke...

Yunnan Dandelion Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yunnan Dandelion Network Technology Co., Ltd. is a station building system. A SQL injection vulnerability exists in Yunnan Dandelion Network Technology Co. The vulnerability is due to the system id parameter does not filter the data submitted by the user, a remote attacker can exploit the...

SQL injection vulnerability in case_view.php and product.php pages of Nanjing DotMo Design website builder system.

Nanjing dot ink design website builder system is a website builder system. A SQL injection vulnerability exists in the caseview.php and product.php pages of the Nanjing DotMo Design website builder system. The vulnerability is due to the system id parameter does not filter the data submitted by t...

Apache2Triad Session Fixation Vulnerability

Apache2Triad is a server software deployment solution for Windows-based platforms. A session fixation vulnerability exists in Apache2Triad version 1.5.4. A remote attacker can exploit this vulnerability to hijack a web session with the help of the 'PHPSESSID' parameter...

CVE-2017-12965

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter...

CVE-2017-13137

The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php...

SQL Injection Vulnerability in Paysan Network Backend Management System

Paixiang network backstage management system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the id parameter of PaiSang's backend management system, which can be exploited by an attacker to obtain sensitive informatio...

CVE-2017-12946

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators...

Multiple Vulnerabilities in Duxcms Backend

DuxCms is a PHP development, based on HMVC rules for small and medium-sized enterprises, companies, news, personal and other related industries, website content management. Duxcms backend - form - guestbook cross-site scripting and SQL injection vulnerability. The vulnerability due to the system ...