CVE-2026-89785

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix out-of-bounds read of INDEXROOT in reparse/objid init ntfsreparseinit and ntfsobjidinit parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles the INDEXROOT attributes named $R and $O. They read i...

PT-2026-93391

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the NTFS3 file system. The functions ntfs reparse init and ntfs objid init parse the index root of the $Extend/$Reparse and $Extend/$ObjId metafiles. Thes...

CVE-2020-13825

A cross-site scripting XSS vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HTML via the viewMode, tvMode, tvType, objID, catgID, objTypeID, or editMode parameter...

CVE-2020-13825: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HTML via the viewMode, tvMode, tvType, objID, catgID, objTypeID, or editMode parameter...

PT-2020-13706

Name of the Vulnerable Software and Affected Versions i-doit version 1.14.2 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via certain parameters, including viewMode, tvMode, tvType, objID, catgID, objTypeID, or editMode. Recommendations Fo...

ThinkSAAS平衡权限漏洞二

简要描述： 权限控制.. 详细说明： 官网最新版存在平衡权限漏洞，进入用户自己的空间，修改基本信息： 添加“个人标签”，抓包，改包: 将objid修改为1，1是admin用户ID 登入admin查看个人标签： admin1的标签已经成了admin的标签.... 漏洞证明： https://images.seebug.org/upload/201503/10204855f2f51b9f73e4b6fcb7dbcd388a566d28.pn...

CVE-2014-1597

SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI...

Sql injection

SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI...

CVE-2014-1597: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CMDB web application in synetics i-doit pro before 1.2.5 and i-doit open allows remote attackers to execute arbitrary SQL commands via the objID parameter to the default URI...

PT-2014-4248

Name of the Vulnerable Software and Affected Versions i-doit pro versions prior to 1.2.5 i-doit open versions prior to 1.2.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the objID parameter to the default URI, which is vulnerable to SQL...

i-doit Pro 'objID'参数SQL注入漏洞

BUGTRAQ ID: 65557 CVECAN ID: CVE-2014-1597 i-doit Pro是开源的IT文档和CMDB。 i-doit Pro 1.2.4 及更早版本的Web应用中存在多个SQL注入漏洞，利用这些漏洞攻击者可以执行未授权数据库操作。 0 i-doit i-doit Pro 1.2.4 厂商补丁： i-doit ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.i-doit.org/ http://www.example.com/?objID=SQL Injection...

Sql injection

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent comestateagent 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action...

CVE-2008-0517

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent comestateagent 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action...

CVE-2008-0517: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Darko Selesi EstateAgent comestateagent 0.1 component for Mambo 4.5.x and Joomla! allows remote attackers to execute arbitrary SQL commands via the objid parameter in a contact showObject action...