CVE-2020-18144

SQL Injection Vulnerability in ECTouch v2 via the integralmin parameter in index.php...

CVE-2020-18144

CVE-2020-18144 is a SQL injection vulnerability in ECTouch v2 exploited via the integral_min parameter in index.php. Root cause: improper input handling leads to SQL commands being executed. Affected software: ECTouch v2 (open-source mobile mall system). Impact (per sources): high severity with p...

CVE-2020-29146

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

CVE-2020-29146: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in index.php of Wayang-CMS v1.0 allows attackers to execute arbitrary web scripts or HTML via a constructed payload created by adding the X-Forwarded-For field to the header...

PT-2021-10138

Name of the Vulnerable Software and Affected Versions: ECTouch version v2 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the integral min parameter in the "index.php" endpoint. Recommendations: For ECTouch version v2, avoid using the integral min...

CVE-2020-18144: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection Vulnerability in ECTouch v2 via the integralmin parameter in index.php...

CVE-2020-21132

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...

CVE-2020-21132

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...

Sql injection

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...

CVE-2020-21132

MetInfo 7.0.0beta SQL injection in index.php is exposed. The vulnerability stems from lack of validation of externally entered SQL statements, allowing an attacker to execute arbitrary SQL. CVSS details indicate high to critical impact across confidentiality, integrity, and availability (C:H, I:H...

CVE-2020-21132

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...

Metinfo MetInfo SQL注入漏洞

Metinfo MetInfo is a content management system CMS developed by China Mito Metinfo using PHP and Mysql. A SQL injection vulnerability exists in index.php in Metinfo 7.0.0beta, which arises from a database-based application that lacks validation of externally entered SQL statements. An attacker ca...

CVE-2020-21132: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php...

PT-2021-10232

Name of the Vulnerable Software and Affected Versions: ThinkSAAS version 2.7 Description: The issue allows remote attackers to modify the description of any user's photo. This is achieved via the photoid and photodesc parameters in the "index.php?app=photo" component. Recommendations: For ThinkSA...

CVE-2020-18741: Undefined Security Weakness

Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."...

CVE-2020-23697

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php...

Cross site scripting

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

CVE-2020-23697: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php...

CVE-2021-34190: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in index.php?menu=billingrates of Issabel PBX version 4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Name" or "Prefix" fields under the "Create New Rate" module...

PT-2021-10928

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue is related to a Cross Site Scripting vulnerability in the page feature of admin/index.php. This vulnerability can be exploited via the page feature. Recommendations For Monstra CMS version 3.0.4,...