9770 matches found
CVE-2017-17897
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2017-15061
Name of the Vulnerable Software and Affected Versions JEXTN Video Gallery extension version 3.0.5 Description The issue concerns SQL Injection via the id parameter in a "view=category" action. Recommendations For JEXTN Video Gallery extension version 3.0.5, avoid using the id parameter in the...
CVE-2017-17829
Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...
CVE-2017-12072
Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...
CVE-2017-12072
Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...
CVE-2017-12072
Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...
CVE-2017-17779
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...
PT-2017-12337
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.8.0-3456 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...
CVE-2017-12072: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...
PT-2017-14996
Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue is related to SQL injection via the id parameter in the referrals.php file. Recommendations For Paid To Read Script version 2.0.5, avoid using the id parameter in the referrals.php file...
CVE-2017-17779: Improper Neutralization of Special Elements used in an SQL Command
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...
DomainSale PHP Script SQL Injection Vulnerability
DomainSale PHP Script is a set of scripts for online domain name selling websites based on PHP and MySQL. A SQL injection vulnerability exists in DomainSale PHP Script version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the...
PHP Scripts Mall Resume Clone Script SQL Injection Vulnerability
PHP Scripts Mall Resume Clone Script is a set of PHP based resume generator script by PHP Scripts Mall India. The script supports creating, editing and sharing resumes online. A SQL injection vulnerability exists in PHP Scripts Mall Resume Clone Script version 2.0.5. A remote attacker can exploit...
FS Trademe Clone SQL Injection Vulnerability
FS Trademe Clone is a set of versatile website creation scripts based on PHP and MySQL. The script supports the creation of websites in categories such as auctions, e-commerce, B2B, real estate, job portals and classified ads. A SQL injection vulnerability exists in FS Trademe Clone version 1.0. ...
PHP Scripts Mall Basic B2B Script SQL Injection Vulnerability
PHP Scripts Mall Basic B2B Script is a set of PHP-based B2B2 business-to-business transactional website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Basic B2B Script version 2.0.8. A remote attacker can exploit the vulnerability by sending the 'id'...
FS Linkedin Clone SQL Injection Vulnerability
FS Linkedin Clone is a set of PHP and MySQL based scripts for job search and recruitment websites. A SQL injection vulnerability exists in FS Linkedin Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'grid' parameter to the group.php file, the 'fid' parameter to...
Posty Scubez Posty Readymade Classifieds Cross-Site Scripting Vulnerability
Posty Scubez Posty Readymade Classifieds is a suite of announcement-based website scripts from Posty India. A cross-site scripting vulnerability exists in Posty Scubez Posty Readymade Classifieds. A remote attacker can inject arbitrary web script or HTML by sending the 'ID' parameter to the...
CVE-2017-17641
Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...