EUVD-2008-4652

Malware in sbrugna...

The vulnerability of the implementation of the pages/edit_fields/9_ajax/add_keyword.php script of the Digital Assets Management System ResourceSpace allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the pages/editfields/9ajax/addkeyword.php implementation of the ResourceSpace digital asset management system lies in the lack of measures taken to protect the SQL query structure during the processing of the k parameter. Exploiting this vulnerability can allow an attacker,...

CVE-2021-41765

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

CVE-2018-11557

The CVE-2018-11557 vulnerability affects YIBAN Easy class education platform 2.0 and is described as a cross-site scripting issue exploitable via the articlelist.php k parameter. Multiple connected sources corroborate an XSS flaw that could enable cookie theft (CNVD CNVD-2018-10951) and related d...