CVE-2014-4302

Cross-site scripting XSS vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2022-4160: Undefined Security Weakness

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cgcopyid POST parameter before concatenating it to an SQL query in cg-copy-comments.php and cg-copy-rating.php. This may allow malicious users with at least author privileg...

CVE-2017-20143 Itech Movie Portal Script film-rating.php Error sql injection

A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection Error. The attack may be initiated remotely. The exploit has been...

CVE-2017-20143: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Itech Movie Portal Script 7.36. This issue affects some unknown processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection Error. The attack may be initiated remotely. The exploit has been...

PT-2022-8010

Name of the Vulnerable Software and Affected Versions Itech Movie Portal Script version 7.36 Description A critical issue has been found in the processing of the file /film-rating.php. The manipulation of the argument v leads to sql injection, which can result in an error. This issue can be...

PT-2018-6600

Name of the Vulnerable Software and Affected Versions: Muviko version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the email parameter to "login.php", the season id parameter to "themes/flixer/ajax/loa...

PT-2017-6711

Name of the Vulnerable Software and Affected Versions Fiyo CMS version 2.0 1.9.1 Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via the id parameter to the "apps/app article/controller/rating.php"...

CVE-2015-3934: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Fiyo CMS 2.01.9.1 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to apps/apparticle/controller/rating.php or 2 user parameter to user/login...

freegamestower.com XSS vulnerability

Open Bug Bounty ID: OBB-216793 Description| Value ---|--- Affected Website:| freegamestower.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

MemHT Portal 4.0.1 - SQL Injection Code Execution Exploit

No description provided by source. !/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Due to weak params filtering we are able to make SQL-Injection. So, 1. Look at 'inc/ajax/ajaxrating.php', line 29. It is not enough to...

vCard PRO 0 rating.php card_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/18699/info VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...

PT-2014-5797

Name of the Vulnerable Software and Affected Versions HAM3D Shop Engine affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the ID parameter in the rating/rating.php file. Recommendations At the...

CVE-2014-4302: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in rating/rating.php in HAM3D Shop Engine allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

HAM3D Shop Engine CMS Cross Site Scripting

Exploit Title : HAM3D Shop Engine CMS XSS Vulnerability + Discovered By : Medrik + Vendor Home-Page : http://ham3d.net/ + Tested On : Windows Note : Another XSS Vuln Discovered By IeDb . This Is a XSS Vulnerability In HAM3D Cms . Locate : http://vulnerablehost/rating/rating.php?ID=XSS Image :...

Sql injection

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

CVE-2009-3965

CVE-2009-3965 describes an SQL injection in rating.php of the application “New 5 star Rating” version 1.0, learnable via the det parameter. The underlying flaw enables remote attackers to execute arbitrary SQL commands, with the NVD noting a base score of 7.5 (HIGH) and network-exposed, low-compl...

CVE-2009-3965: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

New5starRating 1.0 - rating.php SQL Injection

New5starRating 1.0 - rating.php SQL Injection New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Turk Bilisim Gucleri Download; http://www.maniacomputer.com/5starrating/New5Star.html Bug--Sql Inj. Exp: rating.php?det=-1 union select userid,0,0,userpass from admin Panel: /admin/ Thanks:...

New5starRating 1.0 (rating.php) SQL Injection Vulnerability

No description provided by source. New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Turk Bilisim Gucleri Download; http://www.maniacomputer.com/5starrating/New5Star.html Bug--Sql Inj. Exp: rating.php?det=-1 union select userid,0,0,userpass from admin Panel: /admin/ Thanks: milw0rm--Str0k...

New5starRating 1.0 SQL Injection

New5starRating v1.0 rating.php Sql Inj. Vuln. Yazar: Bgh7 Turk Bilisim Gucleri Download; http://www.maniacomputer.com/5starrating/New5Star.html Bug--Sql Inj. Exp: rating.php?det=-1 union select userid,0,0,userpass from admin Panel: /admin/ Thanks: milw0rm--Str0ke...