9770 matches found
CVE-2016-8586
detectedpotentialfiles.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...
SQL Injection Vulnerability in xycms edit_book.php Page id Parameter
XYCMS was formerly known as Nanjing XYCMS Enterprise Building System. After XYCMS editbook.php page id parameter exists SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...
SQL injection vulnerability in the id parameter of the treeformap.php file of Hikvision remote monitoring client system
Hikvision is a video-centric IoT solution and data operation service provider. A SQL injection vulnerability exists in the id parameter of the treeformap.php file in Hikvision's remote monitoring client system. It allows attackers to exploit the vulnerability to obtain sensitive database...
SQL injection vulnerability in the 'id' parameter of the CMS system of Changchun Beichen Network Technology Co.
Changchun Beichen Network Technology Co., Ltd CMS station building system is a government website construction system in Jilin Province. A SQL injection vulnerability exists in the Changchun Beichen Network Technology Co Ltd CMS builder system. The lack of filtering of the 'id' parameter allows a...
Hope Technology enterprise website management system id parameter has SQL injection vulnerability
Hope Technology Enterprise Website Management System is a content management system developed by Anhui Hope Network Technology Co. based on ThinkPHPCMS. Hope Technology enterprise website management system id parameters exist SQL injection vulnerability, attackers can use the vulnerability to...
Vulnerability in orderid parameter of China Telecom's handheld business hall app mall order page.
China Telecom Pocket Business Office is a cell phone terminal-based application software that provides users with recharge and payment, cost inquiries and other services. There is a vulnerability in the orderid parameter of the order page of the China Telecom Palm Business Hall app, which allows ...
Ke361 V1.0.706 SQL Injection Vulnerability in id Parameter of 'detail()' Function
Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modularity, drive and...
CVE-2017-7387
TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php episodeID parameter...
Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-04905)
Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. Revive Adserver has a cross-site scripting vulnerability. A remote attacker can exploit this vulnerability to...
Joomla! OpenCart Component SQL Injection Vulnerability
Joomla! is a content management system which is quite famous in foreign countries.OpenCart is a system component for product management in Joomla! A SQL injection vulnerability exists in the productid parameter of the Joomla! OpenCart index.php page, which can be exploited by attackers to access ...
CVE-2017-7202: Improper Neutralization of Input During Web Page Generation
Multiple Cross-Site Scripting XSS were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data id passed to the 'slims7cendana-master/template/default/detailtemplate.php' and...
SQL Injection Vulnerability in Webkravat Content Management System ic.php Page
Webkrava is a small cms system by php+mysql. A SQL injection vulnerability exists in the ic.php page of the Webkravat content management system. The lack of filtering of the 'id' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...
SQL Injection and Reflective Cross-site Scripting Vulnerabilities in Topps Enterprise Website Builder System
Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services for enterprises in Suzhou and the surrounding areas. Topps enterprise website builder system suffers from SQL injection and reflective cross-site scripting vulnerabilities. Due to the...
Joomla com_easyblog parameter 'id' plugin SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the Joomla comeasyblog parameter 'id' plugin. An attacker can exploit the vulnerability to access or modify database data...
PT-2017-17411
Name of the Vulnerable Software and Affected Versions BigTree CMS versions 4.1.18 through 4.2.16 Description The issue concerns a CSRF problem. It affects the "admin/ajax/users/delete/" page, specifically with the id parameter. This allows an unauthorized user deletion. Recommendations For BigTre...
Joomla com_eventlist plugin 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comeventlist plugin. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_sngevents plugin 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comsngevents plugin. An attacker can exploit the vulnerability to access or modify database data...
Joomla com_kunena plugin 'id' parameter SQL injection vulnerability
Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comkunena plugin. An attacker can exploit the vulnerability to access or modify database data...
Joomla! Component Advertisement Board 3.0.4 - id SQL Injection
Joomla! Component Advertisement Board 3.0.4 - id SQL Injection Exploit Title: Joomla! Component Advertisement Board v3.0.4 - SQL Injection Google Dork: inurl:index.php?option=comadvertisementboard Date: 14.03.2017 Vendor Homepage: http://ordasoft.com/ Software :...
