97 matches found
DEBIAN-CVE-2017-18249
The addfreenid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service race condition or possibly have unspecified other impact via concurrent threads...
UBUNTU-CVE-2017-18249
The addfreenid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service race condition or possibly have unspecified other impact via concurrent threads...
PHP CityPortal SQL Injection Vulnerability
PHP CityPortal is a corporate website building system developed by PhpCityPortal team in India. A SQL injection vulnerability exists in PHP CityPortal version 2.0. A remote attacker can exploit this vulnerability to inject SQL commands with the help of 'nid' or 'cat' parameter...
CVE-2017-15970
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...
Sql injection
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...
CVE-2017-15970
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...
CVE-2017-15970: Improper Neutralization of Special Elements used in an SQL Command
PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...
S-CMS newsview.asp page has a SQL injection vulnerability in the n_id parameter.
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS newsview.asp page. The lack of filtering of the 'nid' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...
Tugux CMS (nid) BLIND SQL Injection Vulnerability
No description provided by source. =================================================================== Tugux CMS nid BLIND sql injection vulnerability =================================================================== Software: Tugux CMS Vendor: www.tugux.com Vuln Type: BLind SQL Injection...
CVE-2014-2526: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive before 6.7 allow remote attackers to inject arbitrary web script or HTML via the 1 sForumName or 2 sDescription parameter to Forum/manage/ForumManager.lsp; 3 sHint, 4 sWord, or 5 nId parameter to Forum/manage/hangman.lsp; 6 user...
CVE-2012-2923
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...
PT-2012-4369
Name of the Vulnerable Software and Affected Versions Hypermethod eLearning Server 4G Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the nid parameter in the "news.php4" endpoint. Recommendations For Hypermethod eLearning Server 4G, avoid usi...
CVE-2012-2923: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...
Sql injection
SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...
CVE-2009-2019
SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...
CVE-2009-2020: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...
CVE-2009-2019: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...
Sql injection
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...
CVE-2008-6795: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...