SQL Injection Vulnerability in F_ID Parameter of Vkflash Image Rotation Management System

Vkflash Picture Rotation Management System is a set of Flash picture rotation management system based on RuoChi's Bcastr processing and secondary development. Vkflash image rotation management system FID parameter SQL injection vulnerability, allowing attackers to exploit the vulnerability to...

CVE-2015-7360

Multiple cross-site scripting XSS vulnerabilities in the Web User Interface WebUI in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 serial parameter to alerts/summary/profile/; the 2 urlForCreatingReport parameter to csearch/report/export/...

Eight Webcom CMS SQL Injection Vulnerability

Eight Webcom CMS 2016 Q2 has a sql injection vulnerability. An injection point exists in the 'id' and 'newsid' parameters of the 'content.php' page. An attacker is able to execute malicious sql commands to connect to dbms...

Accellion File Transfer Appliance SQL Injection Vulnerability

Accellion File Transfer Appliance FTA is a file transfer solution from Accellion USA. The solution supports file transfer, file sharing, file transfer tracking and reporting, and more. Accellion FTA A SQL injection vulnerability exists in the home/seos/courier/securitykey2.api file in versions...

CVE-2016-2351

SQL injection vulnerability in home/seos/courier/securitykey2.api on the Accellion File Transfer Appliance FTA before FTA91240 allows remote attackers to execute arbitrary SQL commands via the clientid parameter...

SQL Injection Vulnerability in the 'id' parameter of the mining system of Shenzhen Jishu Communication Co.

Ltd. is a communication enterprise providing communication services and communication products. A SQL injection vulnerability exists in the program mining system of Shenzhen Jishu Communication Co. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obta...

Wordpress EZLeadPro 插件-lp/index.php文件id参数-跨站脚本漏洞

No description provided by source...

DEBIAN-CVE-2016-3172

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...

CVE-2016-3172

SQL injection vulnerability in tree.php in Cacti 0.8.8g and earlier allows remote authenticated users to execute arbitrary SQL commands via the parentid parameter in an itemedit action...

Linyi Yifeng Network Technology Service Co., Ltd. website system has SQL injection vulnerabilities

Linyi Yifeng Network Technology Service Co., Ltd. is a comprehensive network technology service company integrating e-commerce service, e-commerce training and e-commerce. SQL injection vulnerability exists in the website building system of Linyi Yifeng Network Technology Service Co. Ltd. Due to...

Panmicro e-cology v8 SQL Injection Vulnerability

Panmicro collaborative management application platform e-cology is a set of collaborative business platform. A SQL injection vulnerability exists in the id parameter of the Panmicro e-cology oa system/hrm/resource/HrmResourceContactEdit.jsp page, which allows an attacker to elevate the privileges...

SQL injection vulnerability in the 'id' parameter of the fixed asset management system of higher education institutions at Shandong Guozi Software Co.

The Fixed Asset Management System FAMS for Higher Education is a web-based management system that can run on a campus network or the Internet. A SQL injection vulnerability exists in the Fixed Asset Management System for Higher Education Schools of Shandong Guozi Software Co. The lack of filterin...

StrongSoft灾害预警系统ReportingDetail.aspx ID参数SQL注入漏洞

注入链接：/Disaster/Reporting/ReportingDetail.aspx 注入参数：ID 【获取数据库版本】 /Disaster/Reporting/ReportingDetail.aspx?ID=1' AND 3=CHAR@@version -- 【管理员账号密码】 /Disaster/Reporting/ReportingDetail.aspx?ID=1' AND+2709=select+top+1+UserID%2b'---'%2bUserPwd+from+strongmain.dbo.WebSystemUser--...

UBUNTU-CVE-2015-8369

SQL injection vulnerability in include/topgraphheader.php in Cacti 0.8.8f and earlier allows remote attackers to execute arbitrary SQL commands via the rraid parameter in a properties action to graph.php...

pigcms id参数SQL注入漏洞

No description provided by source...

CVE-2015-7348

Cross-site scripting XSS vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter to demo/en/asyncData/getNodesForBigData.php...

GLPI Elevation of Privilege Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A security vulnerability exists in GLPI 0.85.2 and earlier versions. The...

UBUNTU-CVE-2015-7685

GLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging permissions to create a user and the profilesid parameter to front/user.form.php...

Web Reference Database XML Injection Vulnerability

Web Reference Database is a web-based multi-user interface product that provides search tools and automatic indexing for managing scientific literature. The Web Reference Database unapi.php script fails to adequately filter the 'id' parameter and the sru.php script fails to adequately filter the...

CVE-2015-5076

Multiple cross-site scripting XSS vulnerabilities in X2Engine X2CRM before 5.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 version parameter in protected/views/admin/formEditor.php; the 2 importId parameter in protected/views/admin/rollbackImport.php; the 3 bc, 4 fg,...