9770 matches found
CVE-2017-17928
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...
CVE-2017-17897
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2017-17872
The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action...
CVE-2017-17872
The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action...
CVE-2017-17875
The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action...
CVE-2017-17872
The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action...
Sql injection
The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action...
Sql injection
The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action...
UBUNTU-CVE-2017-17897
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2017-17924: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/reviewuserwise.php...
CVE-2017-17928: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...
CVE-2017-17872: Improper Neutralization of Special Elements used in an SQL Command
The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action...
CVE-2017-17897: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2017-17875: Improper Neutralization of Special Elements used in an SQL Command
The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action...
CVE-2017-17928
PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter...
Joomla! Component JEXTN FAQ Pro 4.0.0 - id SQL Injection
Joomla! Component JEXTN FAQ Pro 4.0.0 - id SQL Injection Exploit Title: Joomla! Component JEXTN FAQ Pro 4.0.0 - SQL Injection Dork: N/A Date: 24.12.2017 Vendor Homepage: http://jextn.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/faq/jextn-faq-pro...
PT-2017-15064
Name of the Vulnerable Software and Affected Versions JEXTN FAQ Pro extension version 4.0.0 Description The issue allows for SQL Injection via the id parameter in a "view=category" action. Recommendations For JEXTN FAQ Pro extension version 4.0.0, avoid using the id parameter in the "view=categor...
PT-2017-15101
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Professional Service Script affected versions not specified Description The issue allows remote attackers to obtain sensitive full-path information. This is achieved by exploiting the id parameter in the "admin/review...
Joomla! JEXTN Video Gallery extension SQL injection vulnerability
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . JEXTN Video Gallery extension is used in one of the video online sharing plug-ins. A SQL injection vulnerability exists in...
Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-01641)
Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the comm/multiprix.php...