EUVD-2016-1560

Malware in sbrugna...

CVE-2021-38321: Improper Neutralization of Input During Web Page Generation

The Custom Menu Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the selectedmenu parameter found in the /custom-menus.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.3.3...

Sql injection

e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...

CVE-2016-10378

e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...

PT-2017-7892

Name of the Vulnerable Software and Affected Versions e107 version 2.1.1 Description The issue allows SQL injection by remote authenticated administrators via the pagelist parameter to "e107 admin/menus.php", related to the menuSaveVisibility function. Recommendations For e107 version 2.1.1,...

tandiscms-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tandis CMS This System Protected By NNET SECURITY !"; 297 exit; 298 299 $pagecontent = array; 300 $result = mysqlquery"SELECT ".$tandisversion."tblnews.,".$tandisversion."contents.content as cnt FROM...