SQL Injection Vulnerability in Webkravat Content Management System ic.php Page

Webkrava is a small cms system by php+mysql. A SQL injection vulnerability exists in the ic.php page of the Webkravat content management system. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

SQL Injection and Reflective Cross-site Scripting Vulnerabilities in Topps Enterprise Website Builder System

Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services for enterprises in Suzhou and the surrounding areas. Topps enterprise website builder system suffers from SQL injection and reflective cross-site scripting vulnerabilities. Due to the...

Joomla com_sngevents plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comsngevents plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_eventlist plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comeventlist plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_easyblog parameter 'id' plugin SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla comeasyblog parameter 'id' plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_kunena plugin 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comkunena plugin. An attacker can exploit the vulnerability to access or modify database data...

Joomla! Component Advertisement Board 3.0.4 - id SQL Injection

Joomla! Component Advertisement Board 3.0.4 - id SQL Injection Exploit Title: Joomla! Component Advertisement Board v3.0.4 - SQL Injection Google Dork: inurl:index.php?option=comadvertisementboard Date: 14.03.2017 Vendor Homepage: http://ordasoft.com/ Software :...

Cross site scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.donate.php id parameter...

CVE-2017-6811

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.shop.php id parameter...

CVE-2017-6812

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.vote.php id parameter...

CVE-2017-6808

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/templatefiles/admin.faq.php id parameter...

CVE-2017-6809

MaNGOSWebV4 4.0.8 is described as vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter). This CVE entry references a reflected XSS condition without provided exploit steps or remediation details in the connected documents. NVD lists a MEDIUM overall impact (CVS...

CVE-2017-6575

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/editmember.php with the GET Parameter: memberid...

CVE-2017-6571

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/campaign/view-campaign.php with the GET Parameter: id...

CVE-2017-6577

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/subscriberlist.php with the POST Parameter: listid...

JUX EventOn component id parameter SQL injection vulnerability

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the id parameter of the JUX EventOn component of Joomla! An attacker can...

CVE-2017-6544

Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/wwwadmin/users.php id parameter...

CVE-2017-6509

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...

Cross site scripting

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...

CVE-2017-6509

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...