Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which stems from an unknown function in its getstatecity.php component that operates on the sc parameter to cause SQL...

CVE-2016-10957: Improper Neutralization of Input During Web Page Generation

The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter...

CVE-2017-17576

FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or service-provider.php ser parameter...

The vulnerability of the install/index.php script of the Exponent CMS system allows a hacker to execute arbitrary code.

The vulnerability of the Exponent CMS content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the sc parameter in the install/index.php script...

PT-2017-14317

Name of the Vulnerable Software and Affected Versions iTech Gigs Script version 1.21 Description The issue allows SQL Injection via the "browse-scategory.php" sc parameter or the "service-provider.php" ser parameter. Recommendations For iTech Gigs Script version 1.21, update the script to properl...

CVE-2015-6028

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

CVE-2015-6028

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

CVE-2015-6028: Improper Neutralization of Special Elements used in an SQL Command

Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter...

PT-2017-6920

Name of the Vulnerable Software and Affected Versions Castle Rock Computing SNMPc versions prior to 2015-12-17 Description The issue allows for SQL injection via the sc parameter. Recommendations For versions prior to 2015-12-17, update to a version released after 2015-12-17 to resolve the issue...

CVE-2016-2242

Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php...

CVE-2016-2242

Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php...

CVE-2016-2242

Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php...

CVE-2016-2242: Improper Control of Generation of Code

Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php...

PT-2017-3057

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.3.7 Patch 3 Description The issue is related to incorrect code generation management in the Exponent CMS content management system. Exploitation of this issue may allow a remote attacker to execute arbitrary co...

CVE-2007-2428: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 fp or 2 sc parameter...