11 matches found
EUVD-2020-3382
Malware in sbrugna...
Sql injection
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
CVE-2020-10983
Affected product: Gambio GX (e-commerce platform). Vulnerable component: admin/mobile.php. Root cause: lack of validation of externally entered SQL statements, enabling SQL Injection in versions prior to 4.0.1.0. Practical impact: allows an attacker to execute arbitrary SQL commands via the vulne...
CVE-2020-10983
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
CVE-2020-10983: Improper Neutralization of Special Elements used in an SQL Command
Gambio GX before 4.0.1.0 allows SQL Injection in admin/mobile.php...
PT-2020-12468
Name of the Vulnerable Software and Affected Versions Gambio GX versions prior to 4.0.1.0 Description The issue allows SQL Injection in the admin/mobile.php file. This could potentially lead to unauthorized access or manipulation of database content. No information is provided about the estimated...
CVE-2019-14931: Improper Neutralization of Special Elements used in an OS Command
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote OS Command Injection vulnerability allows an attacker to execute arbitrary commands on the RTU due to the passing of unsafe user supplied data to t...
Design/Logic Flaw
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobilename parameter...
CVE-2018-20563: Improper Neutralization of Input During Web Page Generation
An issue was discovered in DouCo DouPHP 1.5 20181221. admin/mobile.php?rec=system&act=update has XSS via the mobilename parameter...
PT-2018-15433
Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP. The "admin/mobile.php?rec=system&act=update" endpoint has a cross-site scripting XSS issue via the mobile name parameter. Recommendations For DouPHP version 1.5...
LibGuides Springshare CMS Cross Site Scripting
Exploit Title: LibGuides springshare Cms Cross Site Scripting Vulnerability Google Dork: intext:"Powered by Springshare" Date: 08/24/2012 Author: Crim3R Vendor Home : http://springshare.com/libguides/ Tested on: all ====================================== parametrs cid in cat.php file and search i...