EUVD-2009-3043

Malware in sbrugna...

Wedding Planner select.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project. Designed to provide users with an easy way to plan their wedding through a web application while using real data, Wedding Planner v1.0 is vulnerable to a SQL injection vulnerability that stems from a missing validation of externally entered SQL...

CVE-2022-40404

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php...

Sql injection

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php...

CVE-2022-40404: Improper Neutralization of Special Elements used in an SQL Command

Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php...

Wedding Management System SQL Injection Vulnerability (CNVD-2022-54292)

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/admin/ select.php page lacks validation of externally entered SQL statements,...

CVE-2022-30836

Wedding Management System v1.0 is vulnerable to SQL Injection. via Wedding-Management/admin/select.php...

CVE-2022-30836: Improper Neutralization of Special Elements used in an SQL Command

Wedding Management System v1.0 is vulnerable to SQL Injection. via Wedding-Management/admin/select.php...

SQL Injection

zendframework/zendframework1 is vulnerable to SQL injection attacks. The vulnerability exists due to the improper regular expressions used to prevent SQL injection in ZendDbSelect::order, ZendDbSelect::group, and ZendDbSelect::from of Select.php...

imaginaclic.i2005.org XSS vulnerability

Open Bug Bounty ID: OBB-361131 Description| Value ---|--- Affected Website:| imaginaclic.i2005.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

ExpressionEngine: Reflective XSS

URL http://blackdoorsec.net/sandbox/express/admin.php?/cp/members/bans&search=&sortcol=me%22%3E%3Cimg%20src=x%20onerror=promptdocument.domain%3Emberid&sortdir=desc URL Parameters /cp/members/bans search= sortcol=me%22%3E%3Cimg%20src=x%20onerror=promptdocument.domain%3Emberid sortdir=desc The...

kppw select.php 参数task_id SQL注入漏洞

No description provided by source...

kppw 最新版前台无条件sql注入一枚

简要描述： rt 详细说明： /www/lib/inc/CommonClass.php public static function changehongbao$taskid,$moneys,$uid,$money,$title,$g $result=dbfactory::getone'select from '.TABLEPRE.'witkeyspace where uid='.$uid; if$g $newbalance=$result'balance'-$money+$moneys; dbfactory::query'update '.TABLEPRE.'witkeyspace s...

60cycleCMS 'select.php' Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38637/info 60cycleCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the...

60cycleCMS - 'select.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/38637/info 60cycleCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser,...

60cycleCMS - select.php Multiple HTML Injection Vulnerabilities

60cycleCMS - select.php Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/38637/info 60cycleCMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and...

Sql injection

Multiple SQL injection vulnerabilities in Joker Board aka JBoard 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 core/select.php or 2 the city parameter to topadd.inc.php, reachable through sboard.php...

CVE-2009-3059: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Joker Board aka JBoard 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 core/select.php or 2 the city parameter to topadd.inc.php, reachable through sboard.php...

[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability

ECHOADV55$2006 ------------------------------------------------------------------------ ----------------------- ECHOADV55$2006Phpmybibli =2.1 Multiple Remote File Inclusion Vulnerability ------------------------------------------------------------------------ ----------------------- Author : Dedi...

CVE-2006-5402: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 classpath, 2 javascriptpath, and 3 includepath parameters in a cart.php; the 4 classpath parameter in b index.php; the 5 javascriptpath...