292 matches found
Sql injection
Canteen Management System v1.0 was discovered to contain a SQL injection vulnerability via the userid parameter at /phpaction/fetchOrderData.php...
GHSA-W397-9P2J-6X23 Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented
HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allows remote attackers to redirect users t...
PT-2022-24086 · Tenda · Tenda Ac1206
Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack overflow issue was discovered in the function formWifiWpsOOB, specifically via the index parameter. Recommendations: For version 15.03.06.23, consider restricting access to the...
PT-2022-23385 · Totolink · Totolink A3700R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3700R version 9.1.2u.6134 B20201202 Description: A stack overflow issue was discovered in the setLanguageCfg function via the lang parameter. Recommendations: For version 9.1.2u.6134 B20201202, avoid using the lang parameter in the...
PT-2022-23431 · H3C · H3C Gr-3200
Name of the Vulnerable Software and Affected Versions: H3C GR3200 MiniGR1B0V100R014 Description: A command injection issue was discovered via the param parameter at DelL2tpLNSList. Recommendations: For H3C GR3200 MiniGR1B0V100R014, consider restricting access to the DelL2tpLNSList to minimize the...
phpMyAdmin allows remote attackers to spoof content via the url parameter
The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter...
PT-2021-17864 · Unknown · Teachers Record Management System
Name of the Vulnerable Software and Affected Versions: Teachers Record Management System version 1.0 Description: The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the editid GET parameter in "edit-subjects-detail.php" or...
GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2021-45752)
GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 5.3.2.8 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the url parameter in bbs/login.php...
GetSimple CMS Open Redirect Vulnerability (CNVD-2021-46556)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. An open redirect vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. An attacker can redirect a user to a url parameter via the redirect function...
74CMS SQL Injection Vulnerability (CNVD-2021-43380)
74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the query parameter of plus/ajaxcommon.php...
Joomla! cross-site scripting vulnerability (CNVD-2021-30598)
Joomla! is a globally recognized content management system developed using the PHP language coupled with a MySQL database that can be implemented on various platforms such as Linux, Windows, MacOSX, and many others. A cross-site scripting vulnerability exists in Joomla! versions 3.0.0 through...
Binary Vulnerability in Tenda Routers
hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. A binary vulnerability exists in Tenda routers,...
WCMS Server-Side Request Forgery Vulnerability
WCMS is a content management system CMS that uses an open web interface to build websites. A server-side request forgery vulnerability exists in WCMS version 0.3.2. An attacker can send a specially crafted request from the web application's back-end server via the path parameter of wex/cssjs.php,...
GNU Mailutils 3.7 - Privilege Escalation Exploit
Exploit Title: GNU Mailutils 3.7 - Local Privilege Escalation Date: 2019-11-06 Exploit Author: Mike Gualtieri Vendor Homepage: https://mailutils.org/ Software Link: https://ftp.gnu.org/gnu/mailutils/mailutils-3.7.tar.gz Version: 2.0 = 3.7 Tested on: Gentoo CVE : CVE-2019-18862 Title : GNU Mailuti...
Thunderwind Movie CMS Aj***.php page ca*** parameter SQL injection vulnerability
Thunderwind CMS is a video-on-demand system developed using Thinkphp framework + Mysql to ensure the stability and efficiency of the program. Thunderwind Movie CMS Aj.php page ca parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database...
PT-2018-3751
Name of the Vulnerable Software and Affected Versions NoneCms version 1.3 Description An issue in thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter. This is demonstrated by the query string...
EUVD-2021-0529
Adminer through 4.3.1 has SSRF via the server parameter...
FS Freelancer Clone - sk SQL Injection
FS Freelancer Clone - sk SQL Injection Exploit Title: FS Freelancer Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/freelancer-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Ma...
ZeeBuddy 2x SQL Injection
Exploit Title: ZeeBuddy 2x - SQL Injection Dork: N/A Date: 29.09.2017 Vendor Homepage: http://www.zeescripts.com/ Software Link: http://www.zeebuddy.com/ Demo: http://www.zeebuddy.com/demo/ Version: 2x Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author...
