359 matches found
Sql injection
SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...
CVE-2021-3264
SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...
Cxuucms SQL注入漏洞
cxuucms is a PHP-based content relationship building system. cxuucms version 3.1 has a SQL injection vulnerability that originates from setting the pid parameter in public/admin.php, which can be exploited by attackers to obtain sensitive database information...
CVE-2021-3264: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in cxuucms 3.1 ivia the pid parameter in public/admin.php...
OS Command Injection
xps is vulnerable to OS command injection. An attacker is able to inject and execute arbitrary OS commands via the pid parameter due to the lack of sanitisation and validation...
CVE-2014-8490: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in TennisConnect COMPONENTS 9.927 allows remote attackers to inject arbitrary web script or HTML via the pid parameter to index.cfm...
CVE-2019-16862
Reflected XSS in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter...
CVE-2019-16862
Reflected XSS in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter...
CVE-2019-16862
Reflected XSS in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter...
OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-43372)
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A reflected cross-site scripting vulnerability exists in interface/forms/eyemag/view.php in OpenEMR. An attacker can exploit this vulnerability to execute arbitrary code in the context of a user...
PT-2019-14837
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.2.1 Description The issue allows a remote attacker to execute arbitrary code in the context of a user's session. This is achieved via the pid parameter in the interface/forms/eye mag/view.php file. Recommendations...
CVE-2019-16862: Improper Neutralization of Input During Web Page Generation
Reflected XSS in interface/forms/eyemag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote attacker to execute arbitrary code in the context of a user's session via the pid parameter...
CVE-2016-10951
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...
CVE-2016-10951
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...
PT-2019-7744
Name of the Vulnerable Software and Affected Versions fs-shopping-cart plugin version 2.07.02 for WordPress Description The issue is related to SQL injection via the pid parameter. This allows for potential exploitation. Recommendations For fs-shopping-cart plugin version 2.07.02, consider...
CVE-2016-10951: Improper Neutralization of Special Elements used in an SQL Command
The fs-shopping-cart plugin 2.07.02 for WordPress has SQL injection via the pid parameter...
CVE-2018-20519
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
PT-2018-15411
Name of the Vulnerable Software and Affected Versions 74cms version 4.2.111 Description An issue in 74cms allows remote authenticated users to read or modify arbitrary resumes. This is achieved by changing a job-search intention, specifically through the "index.php?c=Personal&a=ajax save basic"...
CVE-2018-20519: Improper Input Validation
An issue was discovered in 74cms v4.2.111. It allows remote authenticated users to read or modify arbitrary resumes by changing a job-search intention, as demonstrated by the index.php?c=Personal&a=ajaxsavebasic pid parameter...
CVE-2018-16606
In ProConf before 6.1, an Insecure Direct Object Reference IDOR allows any author to view and grab all submitted papers Title and Abstract and their authors' personal information Name, Email, Organization, and Position by changing the value of Paper ID the pid parameter...