1142 matches found
CVE-2017-17621: Improper Neutralization of Special Elements used in an SQL Command
Multivendor Penny Auction Clone Script 1.0 has SQL Injection via the PATHINFO to the /detail URI...
CVE-2017-17572: Improper Neutralization of Special Elements used in an SQL Command
FS Amazon Clone 1.0 has SQL Injection via the PATHINFO to /VerAyari...
Cross site scripting
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
CVE-2017-16785 affects Cacti 1.1.27 and is a reflected XSS via PATH_INFO to host.php. Connected advisories show multiple vendors/osses reporting the issue as part of a 1.1.28 fix set. Impact per Arch Linux advisory: for remote authenticated admins there is cross-site scripting risk; updates fix t...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
CVE-2017-16785: Improper Neutralization of Input During Web Page Generation
Cacti 1.1.27 has reflected XSS via the PATHINFO to host.php...
Sql injection
Job Board Script Software allows SQL Injection via the PATHINFO to a /job-details URI...
Sql injection
PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...
Sql injection
Adult Script Pro 2.2.4 allows SQL Injection via the PATHINFO to a /download URI, a different vulnerability than CVE-2007-6576...
CVE-2017-15964
Job Board Script Software allows SQL Injection via the PATHINFO to a /job-details URI...
CVE-2017-15969
PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...
CVE-2017-15959
Adult Script Pro 2.2.4 allows SQL Injection via the PATHINFO to a /download URI, a different vulnerability than CVE-2007-6576...
CVE-2017-15964
Job Board Script Software allows SQL Injection via the PATHINFO to a /job-details URI...
CVE-2017-15969
PG All Share Video 1.0 allows SQL Injection via the PATHINFO to search/tag, friends/index, users/profile, or videocatalog/category...
CVE-2017-15959
CVE-2017-15959 affects Adult Script Pro 2.2.4 . The vulnerability is a SQL injection via the request path (PATH_INFO) to the /download URI, as described in multiple sources. The root cause is unsafely handling PATH_INFO leading to SQL command injection; the issue is reported as a separate vulnera...