21 matches found
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
EUVD-2019-19280
Malware in sbrugna...
EUVD-2019-7102
Malware in sbrugna...
code-projects E-Health Care System 注入漏洞
Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in code-projects E-Health Care System version 1.0, which stems from the parameter sid in the file /Admin/detail.php that can lead to SQL injection...
CVE-2024-10989: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
Design/Logic Flaw
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
CVE-2019-16312
CVE-2019-16312 affects s-cms v3.0 with a stored/reflected XSS in index.php?type=text via the S_id parameter. The Red Hat and NVD entries confirm the same description; public details are limited to the XSS path and parameter, with no explicit exploitation vectors or patched versions provided in th...
CVE-2019-16312: Improper Neutralization of Input During Web Page Generation
s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...
Design/Logic Flaw
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
CVE-2019-9925
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
CVE-2019-9925
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
CVE-2019-9925: Improper Neutralization of Input During Web Page Generation
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
Sql injection
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wapindex.php?type=newsinfo Sid parameter...
CVE-2018-20479: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wapindex.php?type=newsinfo Sid parameter...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
CVE-2018-20018: Improper Neutralization of Special Elements used in an SQL Command
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...