15 matches found
CVE-2022-0332
CVE-2022-0332 Moodle 3.11 至 3.11.4 - SQL注入 POC GET...
CVE-2026-7727
A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /Base/BaseService.asmx/DataService. This manipulation of the argument SortOrder causes sql injection. The attack can be...
Hoteam Product Data Management System 注入漏洞
The Hoteam Product Data Management System is a product data management system developed by Hoteam Corporation. Versions of the Hoteam Product Data Management System 8.3.9 and earlier had a injection vulnerability. This vulnerability stemmed from the operation of the GetQueryMachineGridOnePageData...
EUVD-2006-4783
Malware in sbrugna...
EUVD-2006-6920
Malware in sbrugna...
EUVD-2010-2862
Malware in sbrugna...
CVE-2014-3992
Multiple SQL injection vulnerabilities in Dolibarr ERP/CRM 3.5.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 entity parameter in an update action to user/fiche.php or 2 sortorder parameter to user/group/index.php...
PT-2014-5659 · Dolibarr · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 3.5.3 Description: The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the entity parameter in an update action to "user/fiche.php" or the sortorder parameter to...
vBulletin vBExperience 3.0 'sortorder' Parameter XSS Vulnerability - Active Check
vBulletin vBExperience is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
CVE-2008-0857: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via the sortOrder parameter to the PMList page...
CVE-2006-6937
CVE-2006-6937 describes an SQL injection in displaypic.asp of Xtreme ASP Photo Gallery, exploitable via the sortorder parameter. The vulnerability arises in the web application component/display logic, allowing remote attackers to inject arbitrary SQL commands. NVD lists a base score of 7.5 (HIGH...
CVE-2006-6937
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter...
CVE-2006-1673
Cross-site scripting XSS vulnerability in vbugs.php in DarkWizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter...
CVE-2006-1673
CVE-2006-1673 affects Dark_Wizard vBug Tracker, specifically the vbugs.php component in version 3.5.1 and earlier. The vulnerability arises from lack of proper input handling in the sortorder parameter, enabling a remote attacker to inject arbitrary web script or HTML (XSS). Exploitation details,...