1094 matches found
CVE-2017-17607
CMS Auditor Website 1.0 is affected by an SQL injection vulnerability reachable via PATH_INFO to /news-detail. The CVE entry notes an SQLi impact affecting confidentiality, integrity, and availability with high/severe severities (CVSS v2 base 7.5 HIGH; CVSS v3 base 9.8 CRITICAL). The vulnerabilit...
CVE-2017-17607
CMS Auditor Website 1.0 has SQL Injection via the PATHINFO to /news-detail...
CVE-2017-17621
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
CVE-2017-17607: Improper Neutralization of Special Elements used in an SQL Command
CMS Auditor Website 1.0 has SQL Injection via the PATHINFO to /news-detail...
CVE-2017-17572: Improper Neutralization of Special Elements used in an SQL Command
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
Cross site scripting
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
CVE-2017-16785 affects Cacti 1.1.27 and is a reflected XSS via PATH_INFO to host.php. Connected advisories show multiple vendors/osses reporting the issue as part of a 1.1.28 fix set. Impact per Arch Linux advisory: for remote authenticated admins there is cross-site scripting risk; updates fix t...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785: Improper Neutralization of Input During Web Page Generation
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
Sql injection
Job Board Script Software allows SQL Injection via the PATHINFO to a /job-details URI...
Sql injection
Adult Script Pro 2.2.4 allows SQL Injection via the PATHINFO to a /download URI, a different vulnerability than CVE-2007-6576...
CVE-2017-15959
Adult Script Pro 2.2.4 allows SQL Injection via the PATHINFO to a /download URI, a different vulnerability than CVE-2007-6576...
CVE-2017-15969
PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...