CVE-2017-6573: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta aka mail-masta plugin 1.0 for WordPress. This affects ./inc/lists/edit-list.php with the GET Parameter: id...

CVE-2017-6544

Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/wwwadmin/users.php id parameter...

CVE-2017-6544: Improper Neutralization of Input During Web Page Generation

Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/wwwadmin/users.php id parameter...

PT-2017-17146

Name of the Vulnerable Software and Affected Versions Gargaj/wuhu through 2017-03-08 Description The issue is related to a reflected XSS in the wuhu-master/www admin/users.php file, specifically affecting the id parameter. Recommendations For Gargaj/wuhu through 2017-03-08, avoid using the id...

CVE-2017-6509

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...

Cross site scripting

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...

CVE-2017-6509

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...

PT-2017-17122

Name of the Vulnerable Software and Affected Versions burgundy-cms versions prior to 2017-03-06 Description The issue is related to a reflected XSS in the admin/components/menu/views/menuitems.php file, specifically affecting the id parameter. Recommendations For versions prior to 2017-03-06,...

CVE-2017-6509: Improper Neutralization of Input During Web Page Generation

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php id parameter...

Joomla! Component JO Facebook Gallery v4.5 - SQL Injection

Joomla! Component JO Facebook Gallery v4. 5 - SQL Injection index. php id parameter into the SQL statement exist GET the type of injection Injection point: http://localhost/PATH/index. php? option=comjofacebookgallery&view=category&id=SQL http://localhost/PATH/index. php?...

Joomla! Component AYS Quiz 1.0 - 'id' SQL Injection

Exploit Title: Joomla! Component AYS Quiz v1.0 - SQL Injection Google Dork: inurl:index.php?option=comaysquiz Date: 04.03.2017 Vendor Homepage: http://ays-pro.com/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/ays-quiz/ Demo:...

Recipe Manager Component 'id' Parameter SQL Injection Vulnerability

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A SQL injection vulnerability exists in the 'id' parameter of the Recipe Manager component of Joomla! which can be exploited by attackers to access or modify database data...

Joomla com_phocadownload component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comphocadownload component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_news component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comnews component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_k2 component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comk2 component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_civicrm component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comcivicrm component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_remository component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comremository component. An attacker can exploit the vulnerability to access or modify database data...

Joomla com_glossary component 'id' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'id' parameter of the Joomla comglossary component. An attacker can exploit the vulnerability to access or modify database data...

SQL Injection Vulnerability in 'id' Parameter of Single Point CRM System

Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...

CVE-2014-9916

Multiple cross-site scripting XSS vulnerabilities in Bilboplanet 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 tribename or 2 tags parameter in a tribes page request to user/ or the 3 userid or 4 fullname parameter to signup.php...