EUVD-2008-4652

Malware in sbrugna...

The vulnerability of the implementation of the pages/edit_fields/9_ajax/add_keyword.php script of the Digital Assets Management System ResourceSpace allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the pages/editfields/9ajax/addkeyword.php implementation of the ResourceSpace digital asset management system lies in the lack of measures taken to protect the SQL query structure during the processing of the k parameter. Exploiting this vulnerability can allow an attacker,...

CVE-2021-41765

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

CVE-2021-41765

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

CVE-2021-41765: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

CVE-2018-11557

The CVE-2018-11557 vulnerability affects YIBAN Easy class education platform 2.0 and is described as a cross-site scripting issue exploitable via the articlelist.php k parameter. Multiple connected sources corroborate an XSS flaw that could enable cookie theft (CNVD CNVD-2018-10951) and related d...

CVE-2018-11557: Improper Neutralization of Input During Web Page Generation

YIBAN Easy class education platform 2.0 has XSS via the articlelist.php k parameter...

PT-2018-10665

Name of the Vulnerable Software and Affected Versions YIBAN Easy class education platform version 2.0 Description The issue concerns a security problem where an attacker can inject malicious code. The estimated number of potentially affected devices worldwide is not available. There is no...

CVE-2014-0121

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

PT-2017-5776

Name of the Vulnerable Software and Affected Versions: Hawt.io affected versions not specified Description: The issue concerns the admin terminal in Hawt.io, which does not require authentication. This allows remote attackers to execute arbitrary commands via the k parameter. Recommendations: At...

CVE-2014-0121: Improper Authentication

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter...

CVE-2008-4672: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searchresults.php in buymyscripts Lyrics Script allows remote attackers to inject arbitrary web script or HTML via the k parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1350: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in kb.php in Fully Modded phpBB phpbbfm 80220 allows remote attackers to execute arbitrary SQL commands via the k parameter in an article action...