CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-6363

SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...

CVE-2018-6365

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

CVE-2018-6365

The CVE-2018-6365 issue affects TSiteBuilder 1.0, where an SQL injection vulnerability arises via the id parameter in /site.php, /pagelist.php, or /page_new.php. The root cause is improper handling of the id input allowing command injection into the database query, enabling an attacker to manipul...

CVE-2018-6365: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /pagenew.php...

PT-2018-17508

Name of the Vulnerable Software and Affected Versions TSiteBuilder version 1.0 Description A SQL Injection issue exists, allowing exploitation via the id parameter in API endpoints such as "/site.php", "/pagelist.php", or "/page new.php". Recommendations For TSiteBuilder version 1.0, consider...

PT-2018-17506

Name of the Vulnerable Software and Affected Versions Task Rabbit Clone version 1.0 Description The issue exists due to SQL Injection in the single blog.php file, specifically via the id parameter. Recommendations For Task Rabbit Clone version 1.0, consider restricting access to the single blog.p...

CVE-2018-6363: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Task Rabbit Clone 1.0 via the singleblog.php id parameter...

Sql injection

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2018-5988

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2018-5988

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2018-5988

CVE-2018-5988 affects Flexible Poll 1.2. The vulnerability is a SQL Injection in the id parameter of mobile_preview.php and index.php, caused by unsafely handling user-supplied input. Impact per sources: remote attacker can inject SQL commands, with potential data exposure/integrity effects as de...

CVE-2018-5988

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2018-5988: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...

CVE-2017-16605

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16605

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16594

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16594: Unrestricted Upload of File with Dangerous Type

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

Discuz! DiscuzX cross-site scripting vulnerability (CNVD-2018-02842)

Discuz! DiscuzX is an online forum system. A cross-site scripting vulnerability exists in Discuz! DiscuzX X3.4. A remote attacker can exploit this vulnerability by sending the 'appid' parameter to the include\spacecp\spacecpspace.php file to inject arbitrary Web script or HTML...

PT-2018-6624

Name of the Vulnerable Software and Affected Versions: WordPress download-manager plugin versions prior to 2.9.52 Description: The issue concerns a security problem where an attacker can exploit the id parameter in a wpdm generate password action to wp-admin/admin-ajax.php API endpoint, leading t...