CVE-2023-49776

The CVE-2023-49776 entry documents an SQL Injection vulnerability in the WordPress plugin Sayfa Sayaç (Sayfa Sayac) version up to 2.6. The root cause is improper neutralization of special elements in SQL commands, due to insufficient escaping of user-supplied input and lack of proper preparation ...

PT-2023-31345 · Unknown · Hakan Demiray Sayfa Sayac

Name of the Vulnerable Software and Affected Versions: Hakan Demiray Sayfa Sayac versions n/a through 2.6 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

CVE-2023-49776: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6...

WordPress Plugin Sayfa Sayac SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Sayfa Saya...

WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection

Software Sayfa Sayaç Type Plugin Vulnerable versions = 2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-49778 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 19c4341a6f7a Credits Rafie Muhammad Patchstack Required privilege...

WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to SQL Injection

Software Sayfa Sayaç Type Plugin Vulnerable versions = 2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-49776 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID b5614af7ec8d Credits Rafie Muhammad Patchstack Required privilege...

Sql injection

SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter...

CVE-2008-4611

SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter...

CVE-2008-4611: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter...

CVE-2008-2872: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in sHibby sHop 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sayfa parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter...

CVE-2008-2048

The documents confirm a Cross-site scripting (XSS) vulnerability in Angelo-Emlak 1.0, specifically in hpz/admin/Default.asp, exploitable via the sayfa parameter. This affects Angelo-Emlak 1.0 and allows remote attackers to inject arbitrary web script or HTML. The root cause is an XSS flaw in the ...

CVE-2008-2048: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows remote attackers to inject arbitrary web script or HTML via the sayfa parameter...

CVE-2007-2887

Cross-site scripting XSS vulnerability in index.php in Web Icerik Yonetim Sistemi WIYS 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page...

CVE-2007-2887

Cross-site scripting XSS vulnerability in index.php in Web Icerik Yonetim Sistemi WIYS 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page...

CVE-2007-2887: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Web Icerik Yonetim Sistemi WIYS 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page...

CVE-2006-0831: Undefined Security Weakness

PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the 1 sayfaadi or 2 sayfa parameter. NOTE: this might be a site-specific issue. If so, it should not be included in CVE...