17 matches found
CVE-2025-70311
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...
CVE-2025-70311
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...
CVE-2025-70311
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...
CVE-2025-70311
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...
CVE-2025-70311
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...
CVE-2025-70311
The JEEWMS warehouse management system (version 1.0 ) is vulnerable to SQL Injection due to improper neutralization of special elements in SQL commands. An attacker can inject malicious SQL statements by targeting the id1 and id2 parameters within the /systemControl.do interface. To mitigate this...
EUVD-2025-206714
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...
CVE-2025-70311: Improper Neutralization of Special Elements used in an SQL Command
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack...
CVE-2023-49161
creationtimestamp| type| source ---|---|--- 2023-12-20 19:25:40+00:00| seen| https://t.me/ctinow/157240 2024-01-13 17:52:09+00:00| seen| https://t.me/ctinow/167882...
CVE-2015-10060
A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/views.py. The manipulation of the argument id1/id2 leads to sql injection. The identifier of the patch is 829a027aca7c17f5a7ec1addca8dd5d5542f86ac. It is...
PT-2023-10239 · Unknown · Mnbikeways Database
Name of the Vulnerable Software and Affected Versions: MNBikeways database affected versions not specified Description: A critical issue was found in the MNBikeways database, affecting the processing of the file Data/views.py. The manipulation of the id1/id2 argument leads to SQL injection...
CVE-2015-10060: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/views.py. The manipulation of the argument id1/id2 leads to sql injection. The identifier of the patch is 829a027aca7c17f5a7ec1addca8dd5d5542f86ac. It is...
ssl-id1.de XSS vulnerability
Open Bug Bounty ID: OBB-440333 Description| Value ---|--- Affected Website:| ssl-id1.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
CVE-2013-3708
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2013-3708: Undefined Security Weakness
The id1.GetPrinterURLList function in Novell iPrint Client before 5.93 allows remote attackers to cause a denial of service via unspecified vectors...
PT-2013-4576
Name of the Vulnerable Software and Affected Versions Novell iPrint Client versions prior to 5.93 Description The issue allows remote attackers to cause a denial of service. This is related to the id1.GetPrinterURLList function. Recommendations For versions prior to 5.93, update to version 5.93 o...
PT-2013-2039
Name of the Vulnerable Software and Affected Versions MYRE Realty Manager affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the cat id1 parameter in the "search.php" endpoint. Recommendations F...