9771 matches found
CVE-2019-9961
A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
Cross site scripting
A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
PT-2019-19959
Name of the Vulnerable Software and Affected Versions Wikindx versions prior to 5.7.0 Description A cross-site scripting issue exists in the resource view of Wikindx, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the id parameter in the RESOURCEVIEW.php fi...
CVE-2019-9961: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in ressource view in core/modules/resource/RESOURCEVIEW.php in Wikindx prior to version 5.7.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2018-12653
A Reflected Cross Site Scripting XSS vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter...
Desdev DedeCMS Arbitrary Password Reset Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A security vulnerability exists in th...
CVE-2019-10014
In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated...
CVE-2019-9925
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
Kingcomposer Cross-Site Scripting Vulnerability
WordPress plugin KingComposer is a professional backend and frontend page builder plugin. A cross-site scripting vulnerability exists in the wp-admin/admin.php?page=kc-mapper page in version 2.7.6 of the WordPress kingcomposer plugin. A remote attacker can exploit the vulnerability to execute...
CVE-2018-20556
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...
CVE-2018-18798
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view...
PT-2019-19928
Name of the Vulnerable Software and Affected Versions kingcomposer plugin version 2.7.6 Description The issue affects the kingcomposer plugin for WordPress, where an XSS vulnerability is present in the wp-admin/admin.php?page=kc-mapper endpoint, specifically with the id parameter. Recommendations...
CVE-2018-18798
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view...
PT-2019-9631
Name of the Vulnerable Software and Affected Versions Attendance Monitoring System version 1.0 Description The issue concerns a SQL Injection flaw. It affects the id parameter in several API endpoints: "student/index.php?view=view", "event/index.php?view=view", and "user/index.php?view=view"...
CVE-2018-18798: Improper Neutralization of Special Elements used in an SQL Command
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view...
Sql injection
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...
PT-2019-19853
Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description A SQL Injection issue was found in the include/plugin/payment/alipay/pay.php file, specifically with the id parameter. This issue does not require any authentication to be exploited. Recommendations For PHPSHE...
CVE-2018-17415
zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...
