10 matches found
CVE-2019-8923
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
Sql injection
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
CVE-2019-8923: Improper Neutralization of Special Elements used in an SQL Command
XAMPP through 5.6.8 and previous allows SQL injection via the cds-fpdf.php jahr parameter. NOTE: This product is discontinued...
charles-darwin-jahr.at XSS vulnerability
Open Bug Bounty ID: OBB-620561 Description| Value ---|--- Affected Website:| charles-darwin-jahr.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Frohes Neues Jahr 2016 - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Frohes Neues Jahr 2016 published at the 'play' market has multiple vulnerabilities...
Glückliches neues Jahr - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application Glückliches neues Jahr published at the 'play' market has multiple vulnerabilities...
XAMPP for Windows 1.8.2 - Blind SQL Injection
XAMPP for Windows 1.8.2 - Blind SQL Injection Exploit Title: XAMPP for Windows 1.8.2 Blind Sql Injection Date: 2013/10/28 Exploit Author: Sebastián Magof Vendor Homepage: apachefriends.org Software Link: apachefriends.org/en/xampp-windows.html Version:1.8.2/1.7.7 Tested on: Windows Twitter: @smag...
CVE-2009-2389: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 jahr or 2 idneu parameter in an archive action, or 3 the newsid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in allgemeintransfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter...
CVE-2006-1759: Undefined Security Weakness
Cross-site scripting XSS vulnerability in allgemeintransfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter...