6 matches found
CVE-2022-1192
The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
HelpDezk SQL Injection Vulnerability
HelpDezk is a powerful software from HelpDezk Inc. for managing requests/events. HelpDezk version 1.1.10 suffers from a SQL injection vulnerability that originates from allowing a remote attacker to send a specially crafted SQL query to the rows parameter of the jsonGrid routing and extract all...
CVE-2022-1192
The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
DEBIAN-CVE-2021-46709
phpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter aka num or number...
Microsoft Visual Basic FlexGrid ActiveX Control Rows Parameter Memory Corruption - Ver2 (CVE-2008-4254)
A memory corruption vulnerability has been reported in Microsoft Visual Basic. An attacker could exploit this vulnerability crafted Rows and Cols properties to the ExpandAll and CollapseAll methods, related to access of incorrectly initialized objects and corruption of the system state. Successfu...
RT: Request Tracker vuln.
RT: Request Tracker vuln. Vuln. discovered by : r0t Date: 30 april 2006 vendor:www.bestpractical.com/?rt=3.5.HEAD affected versions:RT 3.5.HEAD orginal advisory: http://pridels.blogspot.com/2006/04/rt-request-tracker-vuln.html Vuln. Description: RT contains a flaw that may lead to an unauthorized...