25 matches found
CVE-2026-19784 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...
CVE-2026-19784
RosarioSIS (francoisjacquet) is affected up to version 12.8. The vulnerability lies in the DBUpdate function of Discipline/Referrals.php, enabling an authorization bypass that can be triggered remotely. An exploit has been published and may be used in the wild. Mitigation is upgrading to version ...
CVE-2026-19784
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...
CVE-2026-19784 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...
CVE-2026-19784 francoisjacquet RosarioSIS Referrals.php DBUpdate authorization
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...
CVE-2026-19784: Authorization Bypass Through User-Controlled Key
A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 i...
EUVD-2017-8930
Malware in sbrugna...
EUVD-2017-8929
Malware in sbrugna...
CVE-2017-17779
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...
CVE-2017-17778
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...
CVE-2017-17779
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...
CVE-2017-17778
Paid To Read Script 2.0.5 contains a cross-site scripting (XSS) vulnerability exploitable via the referrals.php tier parameter or the admin/userview.php uid parameter. The CVE entry is supported by multiple connected records (NVD and CNVD variants) stating the same vectors. The exact root cause a...
CVE-2017-17779
CVE-2017-17779 corresponds to Paid To Read Script 2.0.5, where an SQL injection is exposed through the referrals.php id parameter. Per the available references, the issue affects the Paid To Read Script 2.0.5 and is reported as an SQL injection vulnerability. The CVSS data indicates a high-severi...
CVE-2017-17778
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...
Paid To Read Script 'id' Parameter SQL Injection Vulnerability
PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the referrals.php...
CVE-2017-17779: Improper Neutralization of Special Elements used in an SQL Command
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter...
CVE-2017-17778: Improper Neutralization of Input During Web Page Generation
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...
PT-2017-14996
Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue is related to SQL injection via the id parameter in the referrals.php file. Recommendations For Paid To Read Script version 2.0.5, avoid using the id parameter in the referrals.php file...
PT-2017-14995
Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible through the tier parameter in the "referrals.php" endpoint or the uid parameter in the...
