CVE-2017-15946: Improper Neutralization of Special Elements used in an SQL Command

In the comtag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the tag parameter to index.php. The request method to execute is GET...

CVE-2017-15946

Summary: CVE-2017-15946 affects Joomla!’s com_tag component version 1.7.6, with a SQL injection in the tag parameter of index.php via a GET request. Root cause: improper handling/interpolation of user-supplied input allowing arbitrary SQL execution. Impact (as stated): compromises of confidential...

CVE-2017-15946

In the comtag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the tag parameter to index.php. The request method to execute is GET...

PT-2017-14303

Name of the Vulnerable Software and Affected Versions com tag component version 1.7.6 for Joomla! Description A SQL injection issue is present in the tag parameter of the index.php file, which can be exploited using the GET request method. Recommendations For com tag component version 1.7.6,...

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

PT-2017-14292

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved by exploiting the host parameter in the module/capacity per device/index.php API endpoint...

CVE-2017-15933: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

CVE-2012-4378

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

CVE-2012-4378: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before 1.19.2, when unspecified JavaScript gadgets are used, allow remote attackers to inject arbitrary web script or HTML via the userlang parameter to w/index.php...

PT-2017-5150

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.18.5 MediaWiki versions 1.19.x prior to 1.19.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This is possible when unspecified JavaScript gadgets are used via the userlang...

CVE-2011-4333

Multiple cross-site scripting XSS vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 from parameter to index.php or the 2 pageno parameter to recentchanges.php...

CVE-2011-4333

Multiple cross-site scripting XSS vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 from parameter to index.php or the 2 pageno parameter to recentchanges.php...

CVE-2017-15380

The CVE-2017-15380 entry corresponds to a cross‑site scripting (XSS) vulnerability in E‑SIC version 1.0, exploitable via the /cadastro/index.php registration page and the nome parameter. Public references indicate a potential remote script injection vector, with impacts limited to user context (n...

PT-2017-5001

Name of the Vulnerable Software and Affected Versions: LabWiki versions 1.1 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the from parameter to "index.php" or the page no parameter to "recentchanges.php". Recommendation...

CVE-2011-4333: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 from parameter to index.php or the 2 pageno parameter to recentchanges.php...

Kaltura 13.2.0 - Remote Code Execution

Kaltura 13.2.0 - Remote Code Execution !/usr/bin/env python Kaltura = 13.1.0 RCE CVE-2017-14143 https://telekomsecurity.github.io/2017/09/kaltura-rce.html $ python kalturarce.py "https://example.com" 0xxxxxxxx "system'id'" host: https://example.com entryid: 0xxxxxxxx code: system'id' + sending...

casamayor-realestate.com XSS vulnerability

Vulnerable URL: http://www.casamayor-realestate.com/si/index.php?seccion="'--!...

CVE-2015-7714: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the 1 id, 2 copyfield in a datacopy action, 3 pshow in an updatefield action, 4 css, 5 tip, 6 catid, 7 textsearch, 8 plisting, or ...

PT-2017-7260

Name of the Vulnerable Software and Affected Versions com rpl component versions prior to 8.9.5 for Joomla! Description The issue allows remote administrators to execute arbitrary SQL commands. This can be achieved via various parameters in the administrator/index.php endpoint, including id, copy...