Sql injection

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17586

FS Olx Clone 1.0 is affected by a SQL Injection vulnerability exposed via the scat parameter in subpage.php or the pid parameter in message.php. The issue is caused by improper handling of user-supplied input in these parameters, enabling remote attackers to inject SQL commands. Public references...

PT-2017-14906

Name of the Vulnerable Software and Affected Versions E-commerce MLM Software version 1.0 Description The issue concerns SQL Injection, which can be exploited through specific parameters in several PHP files. The vulnerable parameters are pid in 'service detail.php', eventid in 'event detail.php'...

CVE-2017-17610: Improper Neutralization of Special Elements used in an SQL Command

E-commerce MLM Software 1.0 has SQL Injection via the servicedetail.php pid parameter, eventdetail.php eventid parameter, or newsdetail.php newid parameter...

CVE-2017-17602: Improper Neutralization of Special Elements used in an SQL Command

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

PT-2017-14886

Name of the Vulnerable Software and Affected Versions Realestate Crowdfunding Script version 2.7.2 Description The issue is related to SQL Injection, which occurs via the pid parameter in the "single-cause.php" endpoint. Recommendations For Realestate Crowdfunding Script version 2.7.2, consider...

PT-2017-14898

Name of the Vulnerable Software and Affected Versions Advance B2B Script version 2.1.3 Description The issue is related to SQL Injection, which can be exploited via the show id parameter in the "tradeshow-list-detail.php" endpoint or the pid parameter in the "view-product.php" endpoint...

PT-2017-14881

Name of the Vulnerable Software and Affected Versions FS Olx Clone version 1.0 Description The issue is related to SQL Injection, which can be exploited via the scat parameter in the "subpage.php" endpoint or the pid parameter in the "message.php" endpoint. Recommendations For FS Olx Clone versio...

CVE-2017-17591: Improper Neutralization of Special Elements used in an SQL Command

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

Updated nagios packages fix security vulnerability

It was found that nagios daemon creates its PID file after dropping privileges, which allows to change its content by non-root user with PID of any other process, resulting into denial-of-service when daemon is stopped CVE-2017-12847. Note that the nagios package on Mageia 5 is no longer supporte...

Ubuntu 14.04 LTS / 16.04 LTS : Apport vulnerabilities (USN-3480-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3480-1 advisory. Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local attacker could use this issue to perform a deni...

USN-3480-1: Apport vulnerabilities

Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local attacker could use this issue to perform a denial of service via resource exhaustion or possibly gain root privileges. CVE-2017-14177 Sander Bos discovered that Apport incorrectly handled core dumps for...

USN-3480-1 apport vulnerabilities

Sander Bos discovered that Apport incorrectly handled core dumps for setuid binaries. A local attacker could use this issue to perform a denial of service via resource exhaustion or possibly gain root privileges. CVE-2017-14177 Sander Bos discovered that Apport incorrectly handled core dumps for...

CVE-2017-14179

Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers...

CVE-2017-14180

Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability tha...

UBUNTU-CVE-2017-14180

Apport 2.13 through 2.20.7 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion or possibly gain root privileges, a different vulnerability tha...

UBUNTU-CVE-2017-14179

Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers...

PT-2017-14340

Name of the Vulnerable Software and Affected Versions Basic B2B Script affected versions not specified Description The issue allows SQL Injection via the product view1.php page, specifically through the pid or id parameters. Recommendations For all affected versions, avoid using the pid or id...

CVE-2017-15985: Improper Neutralization of Special Elements used in an SQL Command

Basic B2B Script allows SQL Injection via the productview1.php pid or id parameter...

P3Scan Design Vulnerabilities

P3Scan is a proxy server for email that scans for worms, Trojans and other malicious emails. A security vulnerability exists in daemon in P3Scan 3.0rc1 and earlier versions, which stems from the creation of the p3scan.pid file after the program has downgraded an account to non-root privileges. A...