172 matches found
CVE-2017-14841
Mojoomla Annual Maintenance Contract AMC Management System allows Arbitrary File Upload in profilesetting image handling...
CVE-2017-14846
CVE-2017-14846 affects Mojoomla Hospital Management System for WordPress. The vulnerability is an SQL injection via the id parameter in that component, per multiple sources (NVD/NVD list and CNVD). The CVSS data indicates high impact on confidentiality, integrity, and availability (NVD CVSS v3.0:...
CVE-2017-14844
CVE-2017-14844 affects Mojoomla WPGYM WordPress Gym Management System. It allows SQL Injection via the id parameter , enabling an attacker with network access (low complexity, no auth) to manipulate queries. CVSS3 base score is 8.8 (HIGH) with HIGH impact on confidentiality, integrity, and availa...
CVE-2017-14842
The CVE-2017-14842 entry concerns Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress, with a documented SQL Injection via the id parameter. Several databases (NVD, CNVD, PRION, CVELIST) confirm the vulnerable component and the injection vector, but the connected sources do not provide vend...
CVE-2017-14847
CVE-2017-14847 affects Mojoomla WPAMS Apartment Management System for WordPress and is described as allowing SQL Injection via the id parameter. Multiple connected sources corroborate a SQL injection vulnerability (no specific versions or root cause are provided in the supplied documents). CVSS m...
CVE-2017-14845
Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter...
CVE-2017-14844
Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter...
CVE-2017-14846
Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter...
CVE-2017-14841
CVE-2017-14841 affects Mojoomla AMC Management System; the profilesetting image handling has an Arbitrary File Upload vulnerability, allowing upload of arbitrary files. This is corroborated by NVD (CVE-2017-14841) and CNVD/CVEs, with Exploit-DB listing a PoC. CVSS v2 base 4.0 (MEDIUM) and CVSS v3...
CVE-2017-14843
Mojoomla School Management System for WordPress is affected by a SQL injection via the id parameter. Root cause: insufficient input validation allowing attackers to inject arbitrary SQL. Impact (per CVSS data): high confidentiality, integrity, and availability impact with network access and low a...