Sql injection

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wapindex.php?type=newsinfo Sid parameter...

PT-2018-15404

Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description The issue allows SQL Injection via the "wap index.php?type=newsinfo" API endpoint, specifically through the S id parameter. Recommendations For S-CMS version 1.0, avoid using the S id parameter in the "wap...

BOSSI company(enterprises)website administrative system thrilling variety of vulnerability-vulnerability warning-the black bar safety net

BOSSI companyenterpriseswebsite administrative system thrilling variety of vulnerabilities Vulnerability: injection vulnerability Vulnerability page: NewsInfo. asp, Vulnerability code: if not isEmptyrequest. QueryString"id" then id=request. QueryString"id" else id=1 end if Set rs = Server...