1142 matches found
CVE-2017-14536: Improper Neutralization of Input During Web Page Generation
trixbox 2.8.0.4 has XSS via the PATHINFO to /maint/index.php or /user/includes/language/langChooser.php...
Sql injection
SQL Injection exists in the Tumder An Arcade Games Platform 2.1 component for Joomla! via the PATHINFO to the category/ URI...
CVE-2018-5984
SQL Injection exists in the Tumder An Arcade Games Platform 2.1 component for Joomla! via the PATHINFO to the category/ URI...
CVE-2018-5984: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the Tumder An Arcade Games Platform 2.1 component for Joomla! via the PATHINFO to the category/ URI...
CVE-2017-17873
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...
Sql injection
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...
CVE-2017-17873: Improper Neutralization of Special Elements used in an SQL Command
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...
CVE-2017-17927: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...
CVE-2017-17873
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATHINFO to the /p URI...
CVE-2017-17621
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
CVE-2017-17607
CMS Auditor Website 1.0 has SQL Injection via the PATHINFO to /news-detail...
Sql injection
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
Sql injection
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
CVE-2017-17572
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
Sql injection
CMS Auditor Website 1.0 has SQL Injection via the PATHINFO to /news-detail...
CVE-2017-17607
CMS Auditor Website 1.0 has SQL Injection via the PATHINFO to /news-detail...
CVE-2017-17621
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
CVE-2017-17621
CVE-2017-17621 affects the Multivendor Penny Auction Clone Script 1.0. The connected sources document a SQL Injection vulnerability that can be triggered via PATH_INFO to the /detail URI, allowing an attacker to inject SQL commands remotely (no authentication required per the CVE data). Several r...
CVE-2017-17607
CMS Auditor Website 1.0 is affected by an SQL injection vulnerability reachable via PATH_INFO to /news-detail. The CVE entry notes an SQLi impact affecting confidentiality, integrity, and availability with high/severe severities (CVSS v2 base 7.5 HIGH; CVSS v3 base 9.8 CRITICAL). The vulnerabilit...