CVE-2018-7766

The vulnerability exists within processing of trackgetdata.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the id input parameter...

BearAdmin SQL Injection Vulnerability

BearAdmin is a backend management system based on ThinkPHP5 and AdminLTE. A SQL injection vulnerability exists in BearAdmin version 0.5, which originates from the admin\controller\AdminLog.php page failing to properly construct a MySQL query. A remote attacker can exploit the vulnerability by...

CVE-2018-10283

CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...

The vulnerability in the `track_import_export.php` script of the U.motion builder system allows a perpetrator to execute arbitrary SQL queries against the database.

The vulnerability of the trackimportexport.php script of the U.motion builder system, a system for managing industrial and residential buildings, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL...

CVE-2018-9309

An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in a dl/dlsendsms.php request...

SQL Injection Vulnerability in xycms Advertising Design Center Website System

xycms advertising design center website system is to asp + access for the development of advertising company website. A SQL injection vulnerability exists in the xycms Advertising Design Center website system. The vulnerability stems from the program's failure to effectively filter the variable...

CVE-2018-6368

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action...

CVE-2018-5989

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099...

CVE-2018-5971

SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2018-6605

SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id parameter in a getPlacemarkDetails, getPlacemarkHoverText, getPathHoverText, or getPathDetails request...

CP Event Calendar SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. CP Event Calendar is one of the event calendar plugin . A SQL injection vulnerability exists in Joomla! CP Event Calendar version 3.0.1. A remote...

Bus Booking Script SQL Injection Vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script. A remote attacker can obtain sensitive data e.g., current database user, mysql user by sending the 'spid' parameter to the admin/viewseatseller.php fil...

Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2018-01382)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in the PixlrEditorHandler.php file in Synology Photo Station versions prior to 6.8.0-3456. A remote attacker can exploit the vulnerability to inject...

CVE-2017-17779

Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...

CVE-2017-17779

Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...

CVE-2017-17600

Basic B2B Script 2.0.8 has SQL Injection via the productdetails.php id parameter...

CVE-2017-17605

Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter...

Techno Portfolio Management Panel 'id' SQL Injection Vulnerability

Techno is a portfolio management administration panel. A SQL injection vulnerability exists in Techno Portfolio Management Panel 'id'. An attacker can exploit this vulnerability to inject SQL commands via a single.php?id= request...

iProject Management System SQL Injection Vulnerability

iProject Management System is a project management software for SMEs. A SQL injection vulnerability exists in iProject Management System version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'ID' parameter to the index.php file...