DoraCMS Cross-Site Scripting Vulnerability

DoraCMS is based on Nodejs + express + mongodb written a content management system . A cross-site scripting vulnerability exists in the id parameter of the getNodes.php page of DoraCMS, which can be exploited by an attacker to steal cookie-based authentication or inject malicious scripts...

CVE-2016-10037

Directory traversal in /connectors/index.php in MODX Revolution before 2.5.2-pl allows remote attackers to perform local file inclusion/traversal/manipulation via a crafted id aka dir parameter, related to browser/directory/getlist...

SQL Injection Vulnerability in the uuid Parameter of Shenzhen Siquan CRM System

Ltd. is engaged in OA, CRM, ERP, HRM, enterprise mailbox system consulting and services. SQL injection vulnerability exists in the uuid parameter of the Shenzhen SiQuan CRM system. Allows attackers to exploit the vulnerability to obtain sensitive database information...

SPIP cross-site scripting vulnerability (CNVD-2016-13015)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in the /ecrire/exec/pucestatut.php file in SPIP 3.1.x. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML wit...

UBUNTU-CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

Resaneh Pardaz Pars SQL Injection Vulnerability

Resaneh Pardaz Pars is a web solution product from parsmedia. An SQL injection vulnerability exists in the id parameter of the category.php page of Resaneh Pardaz Pars, which can be exploited by an attacker to compromise the application, access or modify data, or exploit a potential vulnerability...

SQL Injection Vulnerability in id Parameter of Digital Campus Management System of Shanghai Pengda Computer System Development Co.(CNVD-2017-02002)

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. The digital campus management system of Shanghai Pengda Computer System Development Co. pages are vulnerable to a SQL injection...

SQL Injection Vulnerability in Digital Campus Management System type=Detail&FileId Parameter of Shanghai Pengda Computer System Development Co.

The digital campus system of Shanghai Pengda Computer System Development Co., Ltd. is a technology platform using .NET+SqlServer. NET+SqlServer technology platform. SQL injection vulnerability exists in the Digital Campus Management System/BG/GRBG/FileManage/FileUPload.aspx page of Shanghai Pengd...

SQL Injection Vulnerability in DBSHOP_0.9.3_Beta Frontend

DBShop is an open source e-commerce online store system developed using endFramework. DBSHOP0.9.3Beta front SQL injection vulnerability . Due to /module/Shopfront/src/Shopfront/Controller/ArticleController.php at the id parameter spliced into the infoArticle failed to use quotation marks filter ,...

SQL Injection Vulnerability in VOA (Pengwei) System RelationID Parameter

Shenzhen Pengwei Information Technology Co., Ltd VOA collaborative office platform is a kind of asp development OA system. VOA Pengwei system relationID parameter exists SQL injection vulnerability, the vulnerability URL is...

SQL Injection Vulnerability in Baishuo Networks CMS Management System

The cms management system is a content management system for text processing, image processing, flash animation, sound and video streaming, images and even email archives. Baishuo network cms management system has SQL injection vulnerability, id parameter filtering is not strict leading to sql...

Joomla! com_enmasse Component SQL Injection Vulnerability

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other functions . A SQL injection vulnerability exists in the term?tmpl page id parameter of the Joomla!comenmasse component, which can be exploited by an attacker to compromise the applicatio...

Peel Shopping Object Injection Vulnerability

PEEL SHOPPING is an online shopping mall program. A security vulnerability exists in Peel SHOPPING version 8.0.2. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the id parameter...

SQL Injection Vulnerability in the id parameter of Zhixiang OA System

Zhixiang Information consists of Guangzhou Zhixiang Computer Technology Co., Ltd. and Shenzhen Zhixiang Cloud Information Technology Co., Ltd. and has many offices around the world, which is a customer demand-oriented information technology company centered on the continuous innovation of IT...

Contrexx CMS egov Module 1.0.0 - SQL Injection

Exploit Title: Contrexx CMS:egov moudle SQL injection Google Dork: inurl:?section=egov Date: 12/9/2016 Exploit Author: hamidreza borghei Software Link: https://www.cloudrexx.com/de/index.php?section=downloads&cmd=7&category=8 Version: 1.0.0 Tested on: linux sql injection in id parameter:...

Generalized SQL Injection Vulnerability in VOD Live Streaming System of Nanjing Suaxing Information Technology Development Co.

Nanjing Suya Star Information Technology Development Co., Ltd. is for the school distance education and campus entertainment on demand needs and the development of a set of application systems. A generic SQL injection vulnerability exists in the VOD on-demand live streaming system of Nanjing Suya...

SQL Injection Vulnerability in School Management System of Shenzhen Chuangyou Network Co.

Shenzhen Chuangyou Networks school management system is a secondary school-based education management software. The product /sysTemplateWeb/ShowWebStyle.aspx?XXDM=440203000008&CatalogId= there is a SQL injection vulnerability, the injection parameter is CatalogId, the attacker can use the...

SQL Injection Vulnerability in the id parameter of the /www/index.php page of Xiyu Media's Digital Newspaper System

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There is a SQL injection vulnerability in this product, the vulnerability URL is: /www/index.php?mod=admin&con=review&act=view&id=, the vulnerability parameter is: id, the attacker can use the vulnerability t...

SQL injection vulnerability in the id parameter of the page of the digital newspaper system /www/index.php?mod=admin&con=adminuser&act=mypwdpost

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There are SQL injection vulnerabilities in this product, the vulnerability URL is: /www/index.php?mod=admin&con=adminuser&act=mypwdpost, the vulnerability parameter is: id, POST method of injection, the...