12 matches found
Sql injection
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save...
CVE-2022-29665
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save...
CVE-2022-29669: Improper Neutralization of Special Elements used in an SQL Command
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan...
CVE-2022-29665: Improper Neutralization of Special Elements used in an SQL Command
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save...
PT-2022-19768
Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/topic/save" API endpoint. This allows for potential exploitation...
PT-2022-19771
Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/lists/zhuan" API endpoint. Recommendations For CSCMS Music Portal System...
PT-2022-19765
Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/news/save" API endpoint. This allows for potential exploitation of the system...
CVE-2022-24602
Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...
CVE-2020-21808
SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php...
CVE-2020-21808: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php...
burnley.ac.uk XSS vulnerability
Vulnerable URL: http://www.burnley.ac.uk/news-admin?SearchTag=%3Cscript%3Ealertdocument.domain%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1856453 VIP website...
CVE-2006-3553: Undefined Security Weakness
PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php...