2732 matches found
CVE-2018-5973
SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...
CVE-2018-5973
SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...
Sql injection
SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...
CVE-2018-5973
SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...
CVE-2018-5973
CVE-2018-5973 affects the Professional Local Directory Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in which the attacker can inject SQL commands via the sellers_subcategories.php?IndustryID parameter, or via suppliers.php with IndustryID or CategoryID parameters. Reported PoCs an...
Professional Local Directory Script 1.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Professional Local Directory Script 1.0 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.eihitech.com/ Software Link: http://www.eihitech.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...
Nearly Half of the Norway Population Exposed in HealthCare Data Breach
Cybercriminals have stolen a massive trove of Norway's healthcare data in a recent data breach, which likely impacts more than half of the nation's population. An unknown hacker or group of hackers managed to breach the systems of Health South-East Regional Health Authority RHF and reportedly...
corporategifts.swarovski-professional.com XSS vulnerability
Open Bug Bounty ID: OBB-531372 Description| Value ---|--- Affected Website:| corporategifts.swarovski-professional.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...
CVE-2014-2017
CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP...
CVE-2014-2017
CVE-2014-2017 describes a CRLF injection vulnerability in OXID eShop across multiple editions (Professional/Community/Enterprise) affecting pre-fix releases: Professional before 4.7.11 and 4.8.x before 4.8.4; Enterprise before 5.0.11 and 5.1.x before 5.1.4; Community before 4.7.11 and 4.8.x befor...
Microsoft offers several mechanisms to protect against ransomware
The start of a new year is the perfect time to reassess your security strategy and tactics especially when looking back at the new levels of ransomwares reach and damage in 2017. Its no secret that ransomware attacks are increasing. In fact, a business is hit with ransomware every 40 seconds. If...
PHP Scripts Mall Professional Service Script Information Disclosure Vulnerability (CNVD-2018-00493)
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. An information disclosure vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability to obtain sensitive full path...
PHP Scripts Mall Professional Service Script SQL Injection Vulnerability (CNVD-2018-00489)
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A SQL injection vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability by using the id parameter in admin/review.p...
PHP Scripts Mall Professional Service Script Predictable Registration URL Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A predictable registration URL vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker could exploit this vulnerability to register with an invali...
PHP Scripts Mall Professional Service Script Information Disclosure Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. An information disclosure vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit the vulnerability by sending PATHINFO via a speciall...
PHP Scripts Mall Professional Service Script Cross-Site Scripting Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site scripting vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability via the view parameter in...
PHP Scripts Mall Professional Service Script Cross-Site Request Forgery Vulnerability
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site request forgery vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability to conduct cross-site request...
PHP Scripts Mall Professional Service Script Cross-Site Scripting Vulnerability (CNVD-2018-00494)
Professional Service Script is a script from PHP Scripts Mall with search, task creation and task management features. A cross-site scripting vulnerability exists in PHP Scripts Mall Professional Service Script. A remote attacker can exploit this vulnerability via the admin/generalsettingupd.php...