2422 matches found
PT-2018-8453
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions prior to 8.8.0 Beta2 Description A cross-site scripting issue exists, potentially allowing remote attackers to inject arbitrary web script or HTML. This is related to the "Show Snippet" functionality...
PT-2018-16922
Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionselector wp list pagesshow selector parameter to the wp-admin/options.php endpoint. Recommendations For...
CVE-2017-10907
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...
CVE-2017-10907
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...
CVE-2017-10907
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...
CVE-2017-10907
CVE-2017-10907 concerns a directory traversal in OneThird CMS Show Off prior to version 1.85. The JVN entries specify that an authenticated attacker with editing privileges can delete arbitrary files on the server, implying the vulnerability affects the Show Off component of OneThird CMS (Show Of...
CVE-2017-10907: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en and earlier allows an attacker to read arbitrary files via unspecified vectors...
PT-2017-11599
Name of the Vulnerable Software and Affected Versions OneThird CMS Show Off versions 1.85 and earlier Description A directory traversal issue allows an attacker to read arbitrary files via unspecified vectors. Recommendations For OneThird CMS Show Off versions 1.85 and earlier, at the moment, the...
FS Expedia Clone SQL Injection Vulnerability
FS Expedia Clone is an online travel reservation management system based on PHP and MySQL. The system supports booking of airline tickets, hotel reservations and car rentals via the Internet or telephone agents. A SQL injection vulnerability exists in FS Expedia Clone version 1.0. A remote attack...
PHP Scripts Mall Multiplex Movie Theater Booking Script SQL Injection Vulnerability
PHP Scripts Mall Multiplex Movie Theater Booking Script is a PHP based online theater seat booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Multiplex Movie Theater Booking Script version 3.1.5. A remote attacker can inject SQL into the Multiplex...
FS IMDB Clone SQL Injection Vulnerability
FS IMDB Clone is a set of PHP-based scripts for online movie ticket booking websites. A SQL injection vulnerability exists in FS IMDB Clone version 1.0. The vulnerability can be exploited to inject SQL by sending the 'f' parameter to the movie.php file, the 's' parameter to the tvshow.php file, o...
CVE-2017-17633
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
CVE-2017-17633
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
CVE-2017-17588
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or showmiscvideo.php id parameter...
CVE-2017-17602
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...
CVE-2017-17584
FS Makemytrip Clone 1.0 has SQL Injection via the show-flight-result.php florig or fldest parameter...
Sql injection
FS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show-flight-result.php florig or fldest parameter...