CVE-2017-17636

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17610

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

Sql injection

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

Sql injection

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

Sql injection

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17636

The CVE-2017-17636 entry concerns MLM Forced Matrix 2.0.9 with a SQL injection in news-detail.php using the newid parameter. The vulnerability is described as exploitable remotely without authentication, with impact on confidentiality, integrity, and availability (per CVSS metrics: CVSSv2 base 7....

CVE-2017-17636

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

CVE-2017-17635

The CVE-2017-17635 entry concerns MLM Forex Market Plan Script version 2.0.4, with a SQL Injection vulnerability exploitable via input parameters: news_detail.php newid and event_detail.php eventid. Public records (NVD, CNVD, CVE List) confirm the affected script and the injection vector, indicat...

CVE-2017-17635

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

PT-2017-14906

Name of the Vulnerable Software and Affected Versions E-commerce MLM Software version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in several PHP files. The vulnerable parameters are pid in 'service detail.php', eventid in 'event detail.php'...

CVE-2017-17610: Improper Neutralization of Special Elements used in an SQL Command

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

PT-2017-14931

Name of the Vulnerable Software and Affected Versions MLM Forex Market Plan Script version 2.0.4 Description The issue concerns SQL Injection, which can be exploited via the newid parameter in the "news detail.php" endpoint or the eventid parameter in the "event detail.php" endpoint...

PT-2017-14932

Name of the Vulnerable Software and Affected Versions MLM Forced Matrix version 2.0.9 Description The issue is related to SQL Injection, which can be exploited via the newid parameter in the "news-detail.php" API endpoint. Recommendations For MLM Forced Matrix version 2.0.9, consider restricting...

CVE-2017-17635: Improper Neutralization of Special Elements used in an SQL Command

MLM Forex Market Plan Script 2.0.4 has SQL Injection via the newsdetail.php newid parameter or the eventdetail.php eventid parameter...

CVE-2017-17636: Improper Neutralization of Special Elements used in an SQL Command

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

DramaNetwork news.php parameter newid SQL injection vulnerability

No description provided by source...

CVE-2006-0792

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0792: Undefined Security Weakness

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...