CVE-2017-5574: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter...

GenixCMS register.php SQL injection vulnerability

Details source: http://www.hackersb.cn/shenji/107.html The vulnerability principle Program the root directory of the register. php, section 116 row to 118 line: if isset$GET'activation' code... $usr = Db::resultsprintf"SELECT FROM user WHERE activation = '%s' LIMIT 1", $GET'activation' ; Can be...

MetalGenix GeniXCMS SQL Injection Vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A SQL injection vulnerability exists in the register.php file in MetalGenix GeniXCMS versions prior to...

CVE-2016-10096

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

Sql injection

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

CVE-2016-10096

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

CVE-2016-10096

GeniXCMS before 1.0.0 contains a SQL injection in register.php that can be triggered by the activation parameter to allow remote execution of arbitrary SQL. The issue is exposed in multiple references (e.g., CVE-2016-10096 and accompanying advisories) and is reported across NVD, CNVD, OSV, GHSA, ...

CVE-2016-10096: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

2481.com.au XSS vulnerability

Vulnerable URL:...

PHP Planner 0.4 SQL Injection

PHP Planner SQL Injection Vulnerability , Discovered by NA , NAattutanota.com ================================================================================= Description =========== This is a basic PHP Calendar with lots of features and possiblities. Uses mySQL as backend and is fitted with an...

kharp.net XSS vulnerability

Vulnerable URL: http://www.kharp.net/khp/register.php?conditionkhp=true Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website...

CVE-2015-5335: Exposure of Sensitive Information to an Unauthorized Actor

Cross-site request forgery CSRF vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to hijack the authentication of administrators for requests that send statistics to an arbitrary hub U...

alphastress.com XSS vulnerability

Vulnerable URL: https://alphastress.com/register.php?ref=%22/%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29;%3C/script%3E%3C!-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3276121...

mtw.ru XSS vulnerability

Vulnerable URL: http://mtw.ru/register.php?order=94de4"...

shieldnow.fi XSS vulnerability

Vulnerable URL: http://www.shieldnow.fi/register.php?user=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

treene.com XSS vulnerability

Vulnerable URL: http://www.treene.com/register.php?user=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

thestudentroom.co.uk XSS vulnerability

Vulnerable URL: https://www.thestudentroom.co.uk/register.php?do=addmember Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 11:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7816 Google Pagerank| 6 VIP...

thestudentroom.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-115423 Description| Value ---|--- Affected Website:| thestudentroom.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

tsamail.co.za XSS vulnerability

Vulnerable URL: http://www.tsamail.co.za/register.php Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 08:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 1 VIP websi...

CVE-2015-7682: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the 1 selectinvitaioncodebulkoption or 2 invidelid parameter in the pie-invitation-codes page to...