Lucene search
+L

97 matches found

OSV
OSV
•added 2018/03/26 8:29 p.m.•9 views

DEBIAN-CVE-2017-18249

The addfreenid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service race condition or possibly have unspecified other impact via concurrent threads...

7CVSS7.1AI score0.00306EPSS
SaveExploits0References1
OSV
OSV
•added 2018/03/26 12:00 a.m.•9 views

UBUNTU-CVE-2017-18249

The addfreenid function in fs/f2fs/node.c in the Linux kernel before 4.12 does not properly track an allocated nid, which allows local users to cause a denial of service race condition or possibly have unspecified other impact via concurrent threads...

7CVSS7AI score0.00306EPSS
SaveExploits0References6
CNVD
CNVD
•added 2017/11/03 12:00 a.m.•9 views

PHP CityPortal SQL Injection Vulnerability

PHP CityPortal is a corporate website building system developed by PhpCityPortal team in India. A SQL injection vulnerability exists in PHP CityPortal version 2.0. A remote attacker can exploit this vulnerability to inject SQL commands with the help of 'nid' or 'cat' parameter...

9.8CVSS8.2AI score0.02204EPSS
SaveExploits4References1
OSV
OSV
•added 2017/10/29 6:29 a.m.•12 views

CVE-2017-15970

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

9.8CVSS5.8AI score0.02204EPSS
SaveExploits4References2
Prion
Prion
•added 2017/10/29 6:29 a.m.•22 views

Sql injection

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

7.5CVSS9.8AI score0.02204EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
•added 2017/10/29 6:00 a.m.•29 views

CVE-2017-15970

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

9.9AI score0.02204EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/29 12:00 a.m.•2 views

CVE-2017-15970: Improper Neutralization of Special Elements used in an SQL Command

PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter...

9.8CVSS8.2AI score0.02204EPSS
SaveExploits4References2
CNVD
CNVD
•added 2017/03/25 12:00 a.m.•8 views

S-CMS newsview.asp page has a SQL injection vulnerability in the n_id parameter.

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS newsview.asp page. The lack of filtering of the 'nid' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•176 views

Tugux CMS (nid) BLIND SQL Injection Vulnerability

No description provided by source. =================================================================== Tugux CMS nid BLIND sql injection vulnerability =================================================================== Software: Tugux CMS Vendor: www.tugux.com Vuln Type: BLind SQL Injection...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/25 12:00 a.m.•4 views

CVE-2014-2526: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BarracudaDrive before 6.7 allow remote attackers to inject arbitrary web script or HTML via the 1 sForumName or 2 sDescription parameter to Forum/manage/ForumManager.lsp; 3 sHint, 4 sWord, or 5 nId parameter to Forum/manage/hangman.lsp; 6 user...

6.1CVSS5.8AI score0.01691EPSS
SaveExploits1References2
NVD
NVD
•added 2012/05/21 10:55 p.m.•29 views

CVE-2012-2923

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

7.5CVSS8.3AI score0.011EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2012/05/21 12:00 a.m.•3 views

PT-2012-4369

Name of the Vulnerable Software and Affected Versions Hypermethod eLearning Server 4G Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the nid parameter in the "news.php4" endpoint. Recommendations For Hypermethod eLearning Server 4G, avoid usi...

7.5CVSS0.011EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/05/21 12:00 a.m.•5 views

CVE-2012-2923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in news.php4 in Hypermethod eLearning Server 4G allows remote attackers to execute arbitrary SQL commands via the nid parameter...

7.5CVSS6.4AI score0.011EPSS
SaveExploits2References2
Prion
Prion
•added 2009/06/09 7:30 p.m.•19 views

Cross site scripting

Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

4.3CVSS6.1AI score0.01271EPSS
SaveExploits1References2
Prion
Prion
•added 2009/06/09 7:30 p.m.•27 views

Sql injection

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

7.5CVSS9.1AI score0.01011EPSS
SaveExploits1References3
NVD
NVD
•added 2009/06/09 7:30 p.m.•23 views

CVE-2009-2019

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

7.5CVSS8.4AI score0.01011EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/06/09 12:00 a.m.•5 views

CVE-2009-2020: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to inject arbitrary web script or HTML via the nid parameter...

4.3CVSS6AI score0.01271EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/06/09 12:00 a.m.•4 views

CVE-2009-2019: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in newsdetail.php in Virtue News Manager allows remote attackers to execute arbitrary SQL commands via the nid parameter...

7.5CVSS6.4AI score0.01011EPSS
SaveExploits1References2
Prion
Prion
•added 2009/05/07 5:30 p.m.•25 views

Sql injection

SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...

7.5CVSS9.1AI score0.00975EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/07 12:00 a.m.•4 views

CVE-2008-6795: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewnews.php in nicLOR Vibro-School-CMS allows remote attackers to execute arbitrary SQL commands via the nID parameter...

7.5CVSS6.4AI score0.00975EPSS
SaveExploits3References2
Rows per page
Query Builder