CVE-2017-14844

CVE-2017-14844 affects Mojoomla WPGYM WordPress Gym Management System. It allows SQL Injection via the id parameter , enabling an attacker with network access (low complexity, no auth) to manipulate queries. CVSS3 base score is 8.8 (HIGH) with HIGH impact on confidentiality, integrity, and availa...

CVE-2017-14846

CVE-2017-14846 affects Mojoomla Hospital Management System for WordPress. The vulnerability is an SQL injection via the id parameter in that component, per multiple sources (NVD/NVD list and CNVD). The CVSS data indicates high impact on confidentiality, integrity, and availability (NVD CVSS v3.0:...

CVE-2017-14847

CVE-2017-14847 affects Mojoomla WPAMS Apartment Management System for WordPress and is described as allowing SQL Injection via the id parameter. Multiple connected sources corroborate a SQL injection vulnerability (no specific versions or root cause are provided in the supplied documents). CVSS m...

CVE-2017-14841

CVE-2017-14841 affects Mojoomla AMC Management System; the profilesetting image handling has an Arbitrary File Upload vulnerability, allowing upload of arbitrary files. This is corroborated by NVD (CVE-2017-14841) and CNVD/CVEs, with Exploit-DB listing a PoC. CVSS v2 base 4.0 (MEDIUM) and CVSS v3...

CVE-2017-14846

Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter...

PT-2017-13720

Name of the Vulnerable Software and Affected Versions Mojoomla School Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix f...

PT-2017-13724

Name of the Vulnerable Software and Affected Versions Mojoomla WPAMS Apartment Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contain...

PT-2017-13719

Name of the Vulnerable Software and Affected Versions Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contai...

PT-2017-13723

Name of the Vulnerable Software and Affected Versions Mojoomla Hospital Management System for WordPress affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix...

PT-2017-13718

Name of the Vulnerable Software and Affected Versions Mojoomla Annual Maintenance Contract AMC Management System affected versions not specified Description The issue concerns the handling of profile setting images, allowing for arbitrary file uploads. Recommendations At the moment, there is no...

PT-2017-13721

Name of the Vulnerable Software and Affected Versions Mojoomla WPGYM WordPress Gym Management System affected versions not specified Description The issue allows SQL Injection via the id parameter. Recommendations At the moment, there is no information about a newer version that contains a fix fo...