CVE-2017-17900

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

WordPress bSuite plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. bSuite plugin is used in one of the plugin used to view the number of keyword searches . A cross-site scripting...

Western Digital MyCloud NAS Arbitrary Command Execution

The vulnerability of the “index.php” script in the microprogramming software of Western Digital MyCloud NAS is related to the lack of measures taken at the management level to clean up data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in uistats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 p parameters to index.php...

CVE-2011-4955

Multiple cross-site scripting XSS vulnerabilities in uistats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 s or 2 p parameters to index.php...

PT-2017-5039

Name of the Vulnerable Software and Affected Versions: bSuite plugin versions prior to 5 alpha 3 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the s or p parameters to...

CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

CVE-2017-17645

CVE-2017-17645 affects Bus Booking Script 1.0. The vulnerability is a SQL Injection via the txtname parameter in admin/index.php, caused by unsanitized input in a PHP/MySQL-based web app. Public references (NVD, CNVD, CVE records) describe SQL injection as the issue, with in-the-wild PoCs/exploit...

CVE-2017-17733

CVE-2017-17733 affects Maccms 8.x. The vulnerability allows remote command execution via the wd parameter in an index.php?m=vod-search request. Primary impact is remote code execution with partial confidentiality/integrity/availability concerns (per NVD CVSS 2.0/3.0 data). Connected sources (Red ...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

CVE-2017-17733: Undefined Security Weakness

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

PT-2017-14974

Name of the Vulnerable Software and Affected Versions Maccms versions 8.x Description The issue allows remote command execution via the wd parameter in an "index.php?m=vod-search" request. Recommendations For Maccms version 8.x, avoid using the wd parameter in the "index.php?m=vod-search" request...

CVE-2017-17645: Improper Neutralization of Special Elements used in an SQL Command

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

PT-2017-14940

Name of the Vulnerable Software and Affected Versions Bus Booking Script version 1.0 Description The issue is related to SQL Injection, which occurs via the txtname parameter to the "admin/index.php" endpoint. This allows for potential exploitation. Recommendations For Bus Booking Script version...

Movie Guide 2.0 - SQL Injection

Exploit Title: Movie Guide 2.0 - SQL Injection Dork: N/A Date: 15.12.2017 Vendor Homepage: http://applebitemedia.com/ Software Link: http://applebitemedia.com/amwdl/AMMovieGuide.tar.gz Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web:...

PT-2017-14947

Name of the Vulnerable Software and Affected Versions vBulletin versions prior to 5.4 Description The issue allows remote PHP code execution due to an unauthenticated request that can include directory traversal sequences to specify an arbitrary pathname. Specifically, while ../ traversal is...

CVE-2017-17587

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

Sql injection

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

CVE-2017-17587

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...

CVE-2017-17587: Improper Neutralization of Special Elements used in an SQL Command

FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...