5 matches found
Sql injection
CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...
CVE-2018-10283
CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...
CVE-2018-10283
CVE-2018-10283 affects CliqueMania loja virtual version 14. It is a SQL Injection flaw reachable via the patch/remote.php id parameter in a recomendar action. Multiple sources describe that a remote attacker can exploit the vulnerability to execute SQL commands using the id parameter. The provide...
PT-2018-9799
Name of the Vulnerable Software and Affected Versions: CliqueMania loja virtual version 14 Description: The issue is related to SQL Injection, which occurs via the id parameter in a recomendar action, specifically in the patch/remote.php endpoint. Recommendations: For version 14, avoid using the ...
CVE-2018-10283: Improper Neutralization of Special Elements used in an SQL Command
CliqueMania loja virtual 14 has SQL Injection via the patch/remote.php id parameter in a recomendar action...