B2Bbuilder 7.0.1 /main.php SQL注入漏洞

No description provided by source...

CVE-2015-1428: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

CVE-2014-100031

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

Sql injection

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

CVE-2014-100031: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Ganesha Digital Library GDL 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 download.php or 2 main.php...

CVE-2015-0919: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrators to execute arbitrary SQL commands via the 1 idcat or 2 idclient parameter to backend/main.php...

CVE-2015-0918: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php...

Sefrengo CMS 'main.php' Cross-Site Scripting Vulnerability

Sefrengo CMS is an open source content management system. A cross-site scripting vulnerability exists in Sefrengo CMS 'main.php' due to the application failing to properly filter user-supplied input. This allows an attacker to steal cookie-based credentials, compromise the application, and access...

kawf <= 1.0 (main.php) Remote File Include Vulnerability

No description provided by source. kawf config Remote File Include --------------------------------------------------------------------------------------------- Kawf is a web forum written in PHP4 using MySQL v. 1.0 and all below...

Enterprise Connector 1.0.2 Main.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15984/info Enterprise Connector is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitati...

Double Choco Latte 0.9.3/0.9.4 main.php Arbitrary PHP Code Execution

No description provided by source. source: http://www.securityfocus.com/bid/12894/info Double Choco Latte is reported prone to multiple vulnerabilities. These issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting/HTML...

SolucionXpressPro 'main.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33111/info SolucionXpressPro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Webit Cms SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Webit Cms SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Script Home:...

PHP Web Explorer 0.99b main.php refer Parameter Traversal Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/31595/info PHP Web Explorer is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal string...

Gallery 2.0 Main.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15108/info Gallery is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability could lead to a loss of...

Faweb_2 Mullti Vulnerability

No description provided by source. ======================================================================================== | Title : Faweb2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Tested on: windows SP2 Fran�ais V.Pnx2...

Log1 CMS 2.0 - Multiple Vulnerabilities

No description provided by source. +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email :...

SQLiteManager 1.2 Main.PHP Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/22731/info SQLiteManager is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and script cod...

CVE-2013-6163

Multiple cross-site scripting XSS vulnerabilities in ProjeQtOr formerly Project'Or RIA before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to view/parameter.php, 2 p1value parameter to view/main.php, or 3 objectClass parameter to view/objectDetail.p...

CVE-2013-6163: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ProjeQtOr formerly Project'Or RIA before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to view/parameter.php, 2 p1value parameter to view/main.php, or 3 objectClass parameter to view/objectDetail.p...