CVE-2019-6259

An issue was discovered in idreamsoft iCMS V7.0.13. There is SQL Injection via the app/article/article.admincp.php dataid parameter...

Event Locations 1.0.1 - 'id' SQL Injection

Exploit Title: Event Locations 1.0.1 - SQL Injection Dork: N/A Date: 2019-01-10 Exploit Author: Ihsan Sencan Vendor Homepage: http://ezcode.pt/ Software Link: https://codecanyon.net/item/event-locations-phpmysql-plugin/22100679 Version: 1.0.1 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Plikli CMS SQL Injection Vulnerability

Plikli CMS is a content management system CMS. A SQL injection vulnerability exists in Plikli CMS version 4.0.0, which can be exploited by a remote attacker to execute arbitrary SQL commands by sending the 'id' parameter to the joingroup.php file or the 'commentid ' parameter to the joingroup.php...

Sql injection

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to joingroup.php or 2 commentid parameter to story.php...

CVE-2018-19415

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to joingroup.php or 2 commentid parameter to story.php...

CVE-2018-19415: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Plikli CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to joingroup.php or 2 commentid parameter to story.php...

CVE-2018-13045

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter...

CVE-2019-3577

An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id0 parameter to the /product URI...

PT-2019-8921

Name of the Vulnerable Software and Affected Versions Yeswiki Cercopitheque versions 2018-06-19-1 and earlier Description The issue allows attackers to execute arbitrary SQL commands via the id parameter in the "Bazar" page. This enables unauthorized access and manipulation of database content...

CVE-2018-13045: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "Bazar" page in Yeswiki Cercopitheque 2018-06-19-1 and earlier allows attackers to execute arbitrary SQL commands via the "id" parameter...

CVE-2018-20480

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

PT-2018-15401 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS version 3.0 Description: An issue in S-CMS allows cross-site scripting XSS attacks via the T id parameter in the "admin/demo.php" API endpoint. Recommendations: For S-CMS version 3.0, avoid using the T id parameter in the "admin/demo.ph...

S-CMS Cross-Site Scripting Vulnerability (CNVD-2018-26677)

S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the admin/demo.php file in S-CMS version 3.0, which stems from the program's failure to filter the 'Tid' parameter, which can be exploited by remote attackers to inject arbitrary Web...

S-CMS SQL Injection Vulnerability (CNVD-2018-26679)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Sid' parameter to the wapindex.php?type=newsinfo URL...

Sql injection

SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...

CVE-2018-18399

SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...

CVE-2018-18399: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the "ContentPlaceHolder1uxTitle" component in ArchiveNews.aspx in jco.ir KARMA 6.0.0 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter...

PT-2018-2749

Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite affected versions not specified Description The issue is related to errors in handling relative directory paths. It may allow a remote attacker to read arbitrary files by specifying a file path in the id...

PT-2018-14441

Name of the Vulnerable Software and Affected Versions jco.ir KARMA version 6.0.0 Description A SQL injection issue exists in the ContentPlaceHolder1 uxTitle component in ArchiveNews.aspx, allowing a remote attacker to execute arbitrary SQL commands via the id parameter. Recommendations For jco.ir...

S-CMS SQL Injection Vulnerability (CNVD-2019-08326)

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 3.0 has a SQL injection vulnerability, which can be exploited by attackers through the Sid parameter to conduct SQL injection attacks...