7218 matches found
CVE-2017-17587
FS Indiamart Clone 1.0 has SQL Injection via the catcompany.php token parameter, buyleads-details.php id parameter, or company/index.php c parameter...
androidrevolution.nl XSS vulnerability
Open Bug Bounty ID: OBB-448032 Description| Value ---|--- Affected Website:| androidrevolution.nl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
webapps.fitzmuseum.cam.ac.uk XSS vulnerability
Vulnerable URL: http://webapps.fitzmuseum.cam.ac.uk/explorer/index.php/"'--!confirm/OPENBUGBOUNTY/...
Directory traversal
LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction with PHP code in the content parameter, within a template Style add request to index.php...
WordPress: Arbitrary file deletion in wp-core - guides towards RCE and information disclosure
Vulnerable place 1: wp-admin/post.php $newmeta'thumb' is placed into DB not sanitized directly from user input. case 'editattachment': checkadminreferer'update-post' . $postid; // Don't let these be changed unset$POST'guid'; $POST'posttype' = 'attachment'; // Update the thumbnail filename $newmet...
isara.cvc.ac.th XSS vulnerability
Open Bug Bounty ID: OBB-390772 Description| Value ---|--- Affected Website:| isara.cvc.ac.th Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
EyesOfNetwork web interface 'host' parameter SQL injection vulnerability
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. The EyesOfNetwork web interface aka eonweb is one of these web interfaces...
iProject Management System SQL Injection Vulnerability
iProject Management System is a project management software for SMEs. A SQL injection vulnerability exists in iProject Management System version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'ID' parameter to the index.php file...
CVE-2017-15984
Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...
CVE-2017-15984
Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...
Sql injection
Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...
CVE-2017-15984
Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...
CVE-2017-15961
iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...
Sql injection
iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...
Sql injection
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...
CVE-2017-15961
iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...
CVE-2017-15970
PHP CityPortal 2.0 is vulnerable to SQL Injection through the nid parameter in index.php (page=news action) or the cat parameter. The issue is documented across multiple sources (NVD entry CVE-2017-15970, CNVD/CNVD-2017-35824, Exploit-DB/0day entries, etc.). Public proof-of-concept and exploit in...
CVE-2017-15970
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...