9772 matches found
CVE-2018-17415
zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...
CVE-2018-17415
zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...
PT-2019-9468
Name of the Vulnerable Software and Affected Versions zzcms version 8.3 Description The issue is related to a SQL injection in the /user/zs elite.php endpoint via the id parameter. Recommendations For zzcms version 8.3, avoid using the id parameter in the /user/zs elite.php endpoint until the iss...
CVE-2018-17415: Improper Neutralization of Special Elements used in an SQL Command
zzcms V8.3 has a SQL injection in /user/zselite.php via the id parameter...
CVE-2019-9594
BlueCMS 1.6 allows SQL Injection via the userid parameter in an uploads/admin/user.php?act=edit request...
Design/Logic Flaw
In Indexhibit 2.1.5, remote attackers can execute arbitrary code via the v parameter in conjunction with the id parameter in a updjxcode=true action to the ndxzstudio/?a=system URI...
PT-2019-19280
Name of the Vulnerable Software and Affected Versions Indexhibit version 2.1.5 Description The issue allows remote attackers to execute arbitrary code. This can be achieved by exploiting the v parameter in conjunction with the id parameter when a upd jxcode=true action is sent to the...
CVE-2019-8935
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
PT-2019-19269
Name of the Vulnerable Software and Affected Versions Collabtive version 3.1 Description The issue allows for XSS via the manageuser.php?action=profile API endpoint, specifically through the id parameter. Recommendations For Collabtive version 3.1, avoid using the id parameter in the...
CVE-2019-8935: Improper Neutralization of Input During Web Page Generation
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...
CVE-2019-7332
Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' aka Event ID parameter value in the view download download.php because proper filtration is omitted...
CVE-2019-7316
An issue was discovered in CSS-TRICKS Chat2 through 2015-05-05. The userid parameter in jumpin.php has a SQL injection vulnerability...
CVE-2019-6805
SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...
CVE-2019-6707
PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state productid parameter...
CVE-2019-6296
Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...
Sql injection
Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...
CVE-2019-6296
Cleanto 5.0 has SQL Injection via the assets/lib/exportajax.php id parameter...
CVE-2019-6295
Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter...