WordPress Daily Edition Theme Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.WordPress Daily Edition Theme is a theme plugin for wordpress. WordPress Daily Edition Theme fiche-disque.php...

Betster SQL Injection Vulnerability

Betster aka PHP Betoffice is a suite of software for creating online casinos based on PHP, MySQL and JavaScript. A SQL injection vulnerability exists in Betster version 1.0.4, which stems from the failure of the showprofile.php or categoryedit.php scripts to adequately filter the 'id' parameter;...

SQL injection vulnerability in the Collaboration Management System/c6/JHSoft.Web.Login/NewCView.aspx page of Beijing Jinhe Network Co.

Beijing Jinhe Network Co., Ltd. collaborative management system, according to the precise management ideas guided by the 6C management concept design, the Internet technology, computer technology, Luan Runfeng's management concepts, Chinese culture, the four are closely integrated, the core of...

CVE-2015-2237: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Betster aka PHP Betoffice 1.0.4 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 showprofile.php or 2 categoryedit.php or 3 username parameter in a login to index.php...

SQL Injection Vulnerability in the Collaboration Management System/c6/Jhsoft.Web.login/NewView.aspx Page of Beijing Jinhe Network Co.

Beijing Jinhe Network Co., Ltd. collaborative management system, according to the precise management ideas guided by the 6C management concept design, the Internet technology, computer technology, Luan Runfeng's management concepts, Chinese culture, the four are closely integrated, the core of...

CVE-2015-2183

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...

CVE-2015-2183: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a 1 disporders detail or 2 subadminmgt edit action or 3 cid parameter in an editcurrency action to admin/...

PT-2015-5647

Name of the Vulnerable Software and Affected Versions ZeusCart version 4 Description The issue concerns SQL injection vulnerabilities in the administrative backend. These vulnerabilities allow remote administrators to execute arbitrary SQL commands. This can be achieved through the id parameter i...

UNIT4 Prosoft HRMS Cross-Site Scripting Vulnerability

UNIT4 Prosoft HRMS is a complete HR system suite. The suite streamlines HR processes to maximize the efficiency of business organizations. A cross-site scripting vulnerability exists in the Login.aspx file in UNIT4 Prosoft HRMS 8.14.230.47 and prior versions. A remote attacker can exploit the...

CVE-2015-1603

Multiple cross-site scripting XSS vulnerabilities in Adminsystems CMS before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 page parameter to index.php or 2 id parameter in a usersusers action to asys/site/system.php...

PT-2015-5383

Name of the Vulnerable Software and Affected Versions Adminsystems CMS versions prior to 4.0.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the page parameter to "index.php" or the id parameter in a "users users" action to...

PT-2015-5313

Name of the Vulnerable Software and Affected Versions Joomla! CMSJunkie J-ClassifiedsManager component affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the id parameter in a view...

CVE-2015-1477: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads...

PT-2015-5281

Name of the Vulnerable Software and Affected Versions Sefrengo versions prior to 1.6.2 Description The issue allows remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to "backend/main.php" or remote authenticated users to execute arbitrary SQL commands via the...

CVE-2014-7956: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action in the pods page to wp-admin/admin.php...

PT-2015-3981

Name of the Vulnerable Software and Affected Versions WordPress Pods plugin versions prior to 2.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action in the pods page to "wp-admin/admin.php"...

Sql injection

SQL injection vulnerability in newspopup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2014-10032

SQL injection vulnerability in newspopup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2014-10004

SQL injection vulnerability in admin/datafiles/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-10004: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/datafiles/move.php in Maian Uploader 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...