Sql injection

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

Sql injection

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php reportvideos array parameter...

Sql injection

Secure E-commerce Script 2.0.1 has SQL Injection via the category.php searchmain or searchcat parameter, or the singledetail.php sid parameter...

CVE-2017-17591

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

PT-2017-14886

Name of the Vulnerable Software and Affected Versions Realestate Crowdfunding Script version 2.7.2 Description The issue is related to SQL Injection, which occurs via the pid parameter in the "single-cause.php" endpoint. Recommendations For Realestate Crowdfunding Script version 2.7.2, consider...

PT-2017-14923

Name of the Vulnerable Software and Affected Versions Readymade Video Sharing Script version 3.2 Description The issue concerns a SQL Injection vulnerability. It occurs via the report videos array parameter in the "single-video-detail.php" API endpoint. Recommendations For Readymade Video Sharing...

PT-2017-14925

Name of the Vulnerable Software and Affected Versions Secure E-commerce Script version 2.0.1 Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters include searchmain or searchcat in the "category.php" endpoint,...

PT-2017-14930

Name of the Vulnerable Software and Affected Versions Single Theater Booking Script version 3.2.1 Description The issue is related to SQL Injection, which occurs via the findcity.php q parameter. This allows for potential exploitation. Recommendations For Single Theater Booking Script version...

PT-2017-14920

Name of the Vulnerable Software and Affected Versions PHP Multivendor Ecommerce version 1.0 Description The issue concerns SQL Injection, which can be exploited via the "single detail.php" page using the sid parameter, or through the "category.php" page using the searchcat or chid1 parameters...

CVE-2017-17627: Improper Neutralization of Special Elements used in an SQL Command

Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php reportvideos array parameter...

CVE-2017-17634: Improper Neutralization of Special Elements used in an SQL Command

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17591: Improper Neutralization of Special Elements used in an SQL Command

Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter...

A state of constant uncertainty or uncertain constancy? Fast flux explained

Last August, WireX made headlines. For one thing, it was dubbed the first-known DDoS botnet that used the Android platform. For another, it used a technique that—for those who have been around in the industry for quite a while now—rung familiar in the ears: fast flux. In the context of...

CVE-2017-17110

Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request...

Pivotal Single Sign-On for PCF Cross-Site Scripting Vulnerability

Pivotal Single Sign-On for PCF is a suite of single sign-on security access tools for PCFs from Pivotal Software, USA. A security vulnerability exists in Pivotal Single Sign-On for PCF versions 1.3.x prior to 1.3.4 and 1.4.x prior to 1.4.3. An attacker can exploit the vulnerability by injecting...

Services single sign-on client - Critical - Cross-site scripting - SA-CONTRIB-2017-087

This module allows users of a remote Services-enabled Drupal site to sign on to a second site with their credentials. The module does not sanitize information from the request before displaying it, thereby exposing a cross-site scripting vulnerability...

CVE-2017-8044

In Pivotal Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks...

CVE-2017-8044

Pivotal Single Sign-On for PCF is affected in versions 1.3.x prior to 1.3.4 and 1.4.x prior to 1.4.3. The vulnerability is a DOM-based XSS where code injected via query parameters can execute in the browser environment. Connected sources corroborate the same vulnerability description across multi...

CVE-2017-8044: Improper Neutralization of Input During Web Page Generation

In Pivotal Single Sign-On for PCF 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, certain pages allow code to be injected into the DOM environment through query parameters, leading to XSS attacks...

PT-2017-18087

Name of the Vulnerable Software and Affected Versions Pivotal Single Sign-On for PCF versions 1.3.x prior to 1.3.4 Pivotal Single Sign-On for PCF versions 1.4.x prior to 1.4.3 Description The issue allows code to be injected into the DOM environment through query parameters, leading to XSS attack...