EUVD-2018-19447

Malware in sbrugna...

CVE-2018-7732

An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...

Sql injection

An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...

CVE-2018-7732

An issue was discovered in YxtCMF 3.1. SQL Injection exists in ShitiController.class.php via the ids array parameter to exam/shiti/delshiti.html...

CVE-2018-7732

CVE-2018-7732 affects YxtCMF 3.1 and is a SQL Injection in ShitiController.class.php, triggered by the ids array parameter to exam/shiti/delshiti.html. The issue is confirmed across multiple sources in the connected documents, which describe the vulnerable component and entry point but do not pro...

ECS Online Learning System v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page

E-learning Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A SQL injection vulnerability exists in the ShitiController.class.php page in the frontend of ECS Online Learning System v3.1.0. An attacker can exploit this vulnerability t...