CVE-2023-40921

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

Sql injection

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

CVE-2023-40921

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

CVE-2023-40921: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

CVE-2023-40921

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

CVE-2023-41507

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters...

Exploit for SQL Injection in Superstorefinder Super_Store_Finder

CVE-2023-41507 CVE-2023-41507 - Super Store Finder v3.6 was di...

CVE-2023-41507

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters...

CVE-2023-41507: Improper Neutralization of Special Elements used in an SQL Command

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters...

PT-2021-15858

Name of the Vulnerable Software and Affected Versions The Bello - Directory & Listing WordPress theme versions prior to 1.6.0 Description The issue arises from the lack of sanitization of certain parameters before they are used in SQL statements, leading to SQL Injection issues. The parameters bt...

PT-2020-19896

Name of the Vulnerable Software and Affected Versions Geocoder versions prior to 1.6.1 Description The issue allows Boolean-based SQL injection when the within bounding box function is used with untrusted sw lat, sw lng, ne lat, or ne lng data. This can occur in the sql.rb file of the Geocoder...

PT-2018-14008

Name of the Vulnerable Software and Affected Versions Joomla! Social Factory version 3.8.3 Description A SQL Injection issue exists in the Social Factory component for Joomla!, which can be exploited via the radiuslat, radiuslng, or radiusradius parameter. Recommendations For version 3.8.3,...

CVE-2018-17385: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...

lng-safety.com XSS vulnerability

Open Bug Bounty ID: OBB-559273 Description| Value ---|--- Affected Website:| lng-safety.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

LocalTapiola: Multiple Reflected XSS /webApp/lahti (viestinta.lahitapiola.fi)

Vulnerable script: /webApp/lahti Vulnerable parameters: ctxvarshtml, ctxvarszoom, ctxvarsLat, ctxvarsLng PoC 1 html parameter https://blackfan.ru/localtapiola4567uytr567tre4567ytr/poc1html.html Result: html alertdocument.location PoC 2 zoom parameter...

Malware Attack on 2nd Largest Liquefied Natural Gas Producer

Reports have surfaced that liquified natural gas LNG producer RasGas, based in the Persian Gulf nation of Qatar, has been struck by an unidentified virus, this time shutting down its website and email servers. The malware, however, did not affect the company's operational computers that control t...

Computer Virus Blacks Out Qatari Gas Producer

An “unknown virus” has shutdown the entire computer network of the world’s second largest liquefied natural gas LNG producer, RasGas, according to news reports. RasGas is based in Qatar, a peninsular nation located within the larger Arabian Peninsula. The LNG producer has reportedly been offline...

CVE-2010-3688: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ADMIN/login.php in NetArtMEDIA WebSiteAdmin allows remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the lng parameter...

Sql injection

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...

CVE-2010-1740: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter...