CVE-2017-17636

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

Sql injection

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

CVE-2017-17636

The CVE-2017-17636 entry concerns MLM Forced Matrix 2.0.9 with a SQL injection in news-detail.php using the newid parameter. The vulnerability is described as exploitable remotely without authentication, with impact on confidentiality, integrity, and availability (per CVSS metrics: CVSSv2 base 7....

CVE-2017-17636: Improper Neutralization of Special Elements used in an SQL Command

MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter...

PT-2017-14906

Name of the Vulnerable Software and Affected Versions E-commerce MLM Software version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in several PHP files. The vulnerable parameters are pid in 'service detail.php', eventid in 'event detail.php'...

PT-2017-14931

Name of the Vulnerable Software and Affected Versions MLM Forex Market Plan Script version 2.0.4 Description The issue concerns SQL Injection, which can be exploited via the newid parameter in the "news detail.php" endpoint or the eventid parameter in the "event detail.php" endpoint...

PT-2017-14932

Name of the Vulnerable Software and Affected Versions MLM Forced Matrix version 2.0.9 Description The issue is related to SQL Injection, which can be exploited via the newid parameter in the "news-detail.php" API endpoint. Recommendations For MLM Forced Matrix version 2.0.9, consider restricting...

cniipdtice.dz XSS vulnerability

Open Bug Bounty ID: OBB-71523 Description| Value ---|--- Affected Website:| cniipdtice.dz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

1001000.co.th XSS vulnerability

Vulnerable URL: http://www.1001000.co.th/news-detail.php?id='"/alert/XSSPOSED/...

Website Created By Triad SQL Injection

| | | | '| | | | ' \ / \ ' \ | | | ' | | | \ / / | | | || | | | / | | | | | | | | | || | = 5.0 AND error-based - WHERE or HAVING clause Payload: id=5' AND SELECT 8596 FROMSELECT COUNT,CONCAT0x3a6974713a,SELECT CASE WHEN 8596=8596 THEN 1 ELSE 0 END,0x3a6a6c763a,FLOORRAND02x FROM...