EyesOfNetwork web interface 'host' parameter SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. The EyesOfNetwork web interface aka eonweb is one of these web interfaces...

iProject Management System SQL Injection Vulnerability

iProject Management System is a project management software for SMEs. A SQL injection vulnerability exists in iProject Management System version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'ID' parameter to the index.php file...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

Sql injection

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

CVE-2017-15984

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

CVE-2017-15988: Improper Neutralization of Special Elements used in an SQL Command

Nice PHP FAQ Script allows SQL Injection via the index.php nicetheme parameter, a different vulnerability than CVE-2008-6525...

CVE-2017-15984: Improper Neutralization of Special Elements used in an SQL Command

Creative Management System CMS Lite 1.4 allows SQL Injection via the S parameter to index.php...

PT-2017-14339

Name of the Vulnerable Software and Affected Versions Creative Management System CMS Lite version 1.4 Description The issue allows SQL Injection via the S parameter to the "index.php" endpoint. Recommendations For Creative Management System CMS Lite version 1.4, consider restricting access to the...

PT-2017-14343

Name of the Vulnerable Software and Affected Versions Nice PHP FAQ Script affected versions not specified Description The issue allows SQL Injection via the nice theme parameter in index.php. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2017-16230

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit...

CVE-2017-16230: Improper Neutralization of Input During Web Page Generation

In admin/write-post.php in Typecho through 1.1, one can log in to the background page, write a new article, and add payload in the article content, resulting in XSS via index.php/action/contents-post-edit...

PT-2017-14359

Name of the Vulnerable Software and Affected Versions Typecho versions prior to 1.1 Description The issue allows an attacker to log in to the background page, create a new article, and inject malicious payload into the article content, resulting in a cross-site scripting XSS attack via the...

Sql injection

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

Sql injection

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

CVE-2017-15961

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

CVE-2017-15961

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php...

CVE-2017-15970

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

CVE-2017-15970

PHP CityPortal 2.0 is vulnerable to SQL Injection through the nid parameter in index.php (page=news action) or the cat parameter. The issue is documented across multiple sources (NVD entry CVE-2017-15970, CNVD/CNVD-2017-35824, Exploit-DB/0day entries, etc.). Public proof-of-concept and exploit in...

CVE-2017-16000: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...