CVE-2016-10331

Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...

Allen Disk Cross-Site Scripting Vulnerability

Allen Disk is a free, open source cloud-based hard disk product that features encrypted file storage, online preview, file sharing and more. A cross-site scripting vulnerability exists in the 'id' parameter of the downfile.php file in Allen Disk version 1.6. A remote attacker can exploit this...

CVE-2017-8832

Allen Disk 1.6 has XSS in the id parameter to downfile.php...

CVE-2017-8832

Allen Disk 1.6 has a Cross-Site Scripting (XSS) vulnerability in the id parameter of downfile.php. The connected records consistently describe this XSS flaw for Allen Disk 1.6, but none of the provided documents supply details on exploitation methods, affected versions beyond 1.6, specific root c...

S-CMS member_newsinfo.asp page N_id parameter has SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the Nid parameter of the /member/membernewsinfo.asp page of the S-CMS enterprise website builder system. Because the program fails to effectively filter the data...

S-CMS enterprise website builder system/wapmember/post.asp page O_id parameter exists SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is a SQL injection vulnerability in the Oid parameter of the /wapmember/post.asp page of the S-CMS enterprise website builder system. As the program fails to filter the data submitted by users, it...

SQL injection vulnerability in viewChannerParamXml.jsp file id parameter of Enterprise Customer Management Platform (ECMP)

Enterprise letter is the use of java development of a special tailored to the enterprise customer value-added SMS business, enterprise customers in the use of computers at the same time can be completed with the production of office combined with the internal SMS communication. SQL injection...

Trend Micro Threat Discovery Appliance Arbitrary Code Execution Vulnerability (CNVD-2017-06834)

The Trend Micro Threat Discovery Appliance TDA is a threat discovery appliance with integrated cloud security technology from Trend Micro. The appliance provides detection of malicious activity at the network layer, threat management services, and threat analysis and reporting. A security...

Trend Micro Threat Discovery Appliance Arbitrary Code Execution Vulnerability (CNVD-2017-06832)

The Trend Micro Threat Discovery Appliance TDA is a threat discovery appliance with integrated cloud security technology from Trend Micro. The appliance provides detection of malicious activity at the network layer, threat management services, and threat analysis and reporting. A security...

CVE-2016-8586

detectedpotentialfiles.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...

CVE-2016-8590

logquerydlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...

SQL Injection Vulnerability in xycms edit_book.php Page id Parameter

XYCMS was formerly known as Nanjing XYCMS Enterprise Building System. After XYCMS editbook.php page id parameter exists SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the id parameter of the treeformap.php file of Hikvision remote monitoring client system

Hikvision is a video-centric IoT solution and data operation service provider. A SQL injection vulnerability exists in the id parameter of the treeformap.php file in Hikvision's remote monitoring client system. It allows attackers to exploit the vulnerability to obtain sensitive database...

SQL injection vulnerability in the 'id' parameter of the CMS system of Changchun Beichen Network Technology Co.

Changchun Beichen Network Technology Co., Ltd CMS station building system is a government website construction system in Jilin Province. A SQL injection vulnerability exists in the Changchun Beichen Network Technology Co Ltd CMS builder system. The lack of filtering of the 'id' parameter allows a...

Hope Technology enterprise website management system id parameter has SQL injection vulnerability

Hope Technology Enterprise Website Management System is a content management system developed by Anhui Hope Network Technology Co. based on ThinkPHPCMS. Hope Technology enterprise website management system id parameters exist SQL injection vulnerability, attackers can use the vulnerability to...

Vulnerability in orderid parameter of China Telecom's handheld business hall app mall order page.

China Telecom Pocket Business Office is a cell phone terminal-based application software that provides users with recharge and payment, cost inquiries and other services. There is a vulnerability in the orderid parameter of the order page of the China Telecom Palm Business Hall app, which allows ...

Ke361 V1.0.706 SQL Injection Vulnerability in id Parameter of 'detail()' Function

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modularity, drive and...

CVE-2017-7387

TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php episodeID parameter...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-04905)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. Revive Adserver has a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to...

Joomla! OpenCart Component SQL Injection Vulnerability

Joomla! is a content management system which is quite famous in foreign countries.OpenCart is a system component for product management in Joomla! A SQL injection vulnerability exists in the productid parameter of the Joomla! OpenCart index.php page, which can be exploited by attackers to access ...