7 matches found
SQL injection vulnerability in the pa*** parameter of the ru***.php page of the website building system of Huaihua Fifth Element Network Information Company Limited (CNVD-2020-26552)
Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...
SQL injection vulnerability in the pa*** parameter of the website building system ru***.php of Huaihua Fifth Element Network Information Co.
Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...
CVE-2013-7193: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 pa parameter to auction/asp/list.asp, or the 2 UserID or 3 Password to auction/casp/admin.asp...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inject arbitrary web script or HTML via the pa parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4381
Cross-site scripting XSS vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inject arbitrary web script or HTML via the pa parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4381: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in texmedia Million Pixel Script 3 allows remote attackers to inject arbitrary web script or HTML via the pa parameter. NOTE: some of these details are obtained from third party information...
CVE-2006-3363: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter...