66 matches found
CVE-2024-0883: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects the function prepare of the file admin/pay.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...
PT-2022-15938
Name of the Vulnerable Software and Affected Versions S-CMS version 5.0 Description The issue is related to a SQL injection vulnerability in the member pay.php file via the O id parameter. This allows for potential exploitation by injecting malicious SQL code. Recommendations For S-CMS version 5....
CVE-2021-26739
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
Sql injection
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
CVE-2021-26739
The CVE-2021-26739 entry concerns a SQL injection in pay.php of Millken Doyocms 2.3. The underlying issue is unvalidated input via the attribute parameter, enabling arbitrary SQL execution, with potential high impact per the NVD metrics (base CVSSv3.1 9.8, network attack, no authentication, high ...
PT-2021-17117
Name of the Vulnerable Software and Affected Versions millken doyocms version 2.3 Description The issue allows attackers to execute arbitrary code via the attribute parameter in the pay.php file. This is a SQL Injection vulnerability, which means an attacker can inject malicious SQL code to...
CVE-2021-26739: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
PT-2021-3761
Name of the Vulnerable Software and Affected Versions SourceCodester CASAP Automated Enrollment System version 1.0 Description The issue is related to a lack of protection for the SQL query structure, allowing remote attackers to execute arbitrary SQL statements. This can impact the...
CVE-2018-20985
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...
CVE-2018-20985
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...
CVE-2018-20985
CVE-2018-20985 affects the WordPress plugin WP Payeezy Pay (before 2.98). Multiple sources confirm a local file inclusion (LFI) vulnerability in pay.php, donate.php, donate-rec, and pay-rec, caused by insufficient input verification. The NVD entry describes LFI with potential partial/full confide...
CVE-2018-20985: Improper Input Validation
The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec...
PT-2019-10422
Name of the Vulnerable Software and Affected Versions wp-payeezy-pay plugin versions prior to 2.98 Description The issue concerns local file inclusion in certain files of the plugin, specifically pay.php, donate.php, donate-rec, and pay-rec. Recommendations For versions prior to 2.98, update to...
CVE-2019-9762
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...
CVE-2019-9762: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication...
PT-2019-19853
Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description A SQL Injection issue was found in the include/plugin/payment/alipay/pay.php file, specifically with the id parameter. This issue does not require any authentication to be exploited. Recommendations For PHPSHE...
tradeindiaresearch.com XSS vulnerability
Open Bug Bounty ID: OBB-509495 Description| Value ---|--- Affected Website:| tradeindiaresearch.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
forskolinlife.com XSS vulnerability
Open Bug Bounty ID: OBB-440081 Description| Value ---|--- Affected Website:| forskolinlife.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
a1000yoga.com XSS vulnerability
Open Bug Bounty ID: OBB-133793 Description| Value ---|--- Affected Website:| a1000yoga.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
