EUVD-2018-4586

Malware in sbrugna...

CVE-2018-12630

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

CVE-2018-12630

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

Sql injection

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

CVE-2018-12630

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

CVE-2018-12630

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...

CVE-2018-12630

CVE-2018-12630 affects NEWMARK NMCMS 2.1. The issue is a SQL Injection in the sect_id parameter of the /catalog URI, allowing an attacker to execute arbitrary SQL commands. Impact is high/critical (CVSS3 base 9.8; no auth, network access, no user interaction). Root cause: improper handling of use...

PT-2018-11294

Name of the Vulnerable Software and Affected Versions NEWMARK aka New Mark NMCMS version 2.1 Description The issue allows SQL Injection via the sect id parameter to the "/catalog" URI. Recommendations For NEWMARK aka New Mark NMCMS version 2.1, avoid using the sect id parameter in the "/catalog"...

CVE-2018-12630: Improper Neutralization of Special Elements used in an SQL Command

NEWMARK aka New Mark NMCMS 2.1 allows SQL Injection via the sectid parameter to the /catalog URI...