CVE-2018-19061

DedeCMS 5.7 SP2 has SQL Injection via the dede\codo.php ids parameter...

CVE-2018-19061: Improper Neutralization of Special Elements used in an SQL Command

DedeCMS 5.7 SP2 has SQL Injection via the dede\codo.php ids parameter...

Gxlcms SQL Injection Vulnerability (CNVD-2018-21608)

Gxlcms is an enterprise website creation system. A SQL injection vulnerability exists in the \lib\admin\action\dataaction.class.php file in Gxlcms version 2.0. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the 'ids' parameter...

CVE-2018-18488

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids parameter...

CVE-2018-18488: Improper Neutralization of Special Elements used in an SQL Command

In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, SQL Injection exists via the ids parameter...

CVE-2018-7732: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...

ThinkSNS attach_ids parameter is vulnerable to SQL injection.

ThinkSNS as a domestic Social Software products comprehensive service provider pioneer, full-platform one-stop for enterprises to provide social systems, light blogging systems, SNS social networking platform solutions, product construction, free social source code download, system maintenance...

DEBIAN-CVE-2016-10134

SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php...

SQL Injection Vulnerability in Ocean CMS zyapi.php Page

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the Ocean CMS zyapi.php page. The lack of filtering of the '$ids' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...

Sql injection

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...

CVE-2014-10038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter...

CVE-2012-4990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...