CVE-2020-18877

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

CVE-2020-18878: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'...

PT-2021-10247

Name of the Vulnerable Software and Affected Versions: Skycaiji version 1.3 Description: The issue allows remote attackers to obtain sensitive information. This is achieved through a Directory Traversal attack. The "index.php" component is vulnerable, specifically when the parameters...

PT-2021-10246

Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1.0 Description: The issue allows remote attackers to obtain sensitive information via the flag parameter in the component "/coreframe/app/order/admin/index.php". This is a SQL Injection issue that can be exploited by...

CVE-2020-18877: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'...

Exploit for SQL Injection in Os4Ed Opensis

OPENSIS 8.0 SQL INJECTION VULNERABILITY CVE-2021-39377 A SQL...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-22937

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...

Exploit for Cross-site Scripting in Online_Student_Rate_System_Project Online_Student_Rate_System

CVE-2021-39408 A reflected Cross Site Scripting XSS vulnerab...

CVE-2020-22937: Improper Control of Generation of Code

A remote code execution RCE in e/install/index.php of EmpireCMS 7.5 allows attackers to execute arbitrary PHP code via writing malicious code to the install file...

PT-2021-10144

Name of the Vulnerable Software and Affected Versions: tp-shop versions 2.x through 3.x Description: A SQL Injection issue exists via the "/index.php/home/api/shop" API endpoint, specifically through the fBill parameter. Recommendations: For tp-shop versions 2.x through 3.x, avoid using the fBill...

TPshop SQL注入漏洞

TPshop is a new retail smart e-commerce ecosystem. TPshop security vulnerability, the vulnerability stems from the index.php home api store fBill parameter may lead to SQL injection vulnerability...

CVE-2020-18164: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

CVE-2021-38758

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

Directory traversal

Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php...

CVE-2021-38758

CVE-2021-38758 affects the Online Catering Reservation System 1.0. The vulnerability is a directory traversal due to lack of validation in index.php, allowing access to restricted files as described in the CVE entry. NVD lists CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, No u...