PT-2021-18684

Name of the Vulnerable Software and Affected Versions Invision Community IPS Community Suite versions prior to 4.5.4.2 Description The issue allows SQL Injection via the Downloads REST API, specifically through the sortDir parameter in a sortBy=popular action to the GETindex method in...

CVE-2021-3025: Improper Neutralization of Special Elements used in an SQL Command

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API the sortDir parameter in a sortBy=popular action to the GETindex method in applications/downloads/api/files.php...

PT-2019-9525

Name of the Vulnerable Software and Affected Versions Scriptzee Flippa Marketplace Clone version 1.0 Description A SQL injection issue exists via the sortBy or sortDir parameter in the site-search functionality. Recommendations For Scriptzee Flippa Marketplace Clone version 1.0, avoid using the...

CVE-2018-17841: Improper Neutralization of Special Elements used in an SQL Command

SQL injection exists in Scriptzee Flippa Marketplace Clone 1.0 via the site-search sortBy or sortDir parameter...

Flippa Marketplace Clone 1.0 - date_started SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Flippa Marketplace Clone 1.0 - 'datestarted' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/products/details/15 Version: 1.0 Category: Webapps Tested on:...

Cross site scripting

Cross-site scripting XSS vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter...

CVE-2014-2965

CVE-2014-2965 is a reflected XSS in SpamTitan’s management interface, affecting auth-settings-x.php prior to version 6.04. The vulnerability allows an attacker to inject arbitrary script via the sortdir parameter, executing in a user’s browser context. SpamTitan addressed this with a 6.04 patch; ...

CVE-2014-2965

Cross-site scripting XSS vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter...

CVE-2014-2965: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter...

PT-2014-4987

Name of the Vulnerable Software and Affected Versions SpamTitan versions prior to 6.04 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter in the auth-settings-x.php file. Recommendations For versions prior to 6.04,...

Plogger CMS 1.0 RC1 Cross Site Scripting

Exploit Title: Plogger cms sortdir Cross Site Scripting Vulnerability Version : 1.0 RC1 Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home or download link: http://www.plogger.org/download/ Tested on: all ================================== Plogger is the next generation in...

Sql injection

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

CVE-2009-0429

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

CVE-2009-0429: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...

CVE-2009-0429

Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the 1 search parameter to search.asp, 2 SortDir parameter to auctionsended.asp, and the 3 catid parameter to wishlist.php...