8435 matches found
Structured Data Linter Directory Traversal Vulnerability
Structured Data Linter is an open source embedded RDF markup for extracting and validating HTML. A directory traversal vulnerability exists in Structured Data Linter 2.4.1 and earlier versions, which stems from the program failing to detect user input. An attacker can exploit this vulnerability t...
CVE-2017-1000448
Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possibility of disclosing information about the remote host...
CVE-2017-1000448
Structured Data Linter versions 2.4.1 and older are vulnerable to a directory traversal attack in the URL input field resulting in the possibility of disclosing information about the remote host...
Muslim Matrimonial Script SQL Injection Vulnerability
Muslim Matrimonial Script is a community matrimonial script for matrimonial websites by PHP Scripts Mall. PHP Scripts Mall Muslim Matrimonial Script has a SQL injection vulnerability. The vulnerability can be exploited to conduct SQL injection attacks via the view-profile.php memid parameter...
DEBIAN-CVE-2017-17920
SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...
SQL Injection Vulnerability in phpaaCMS article.add.php File
phpaaCMS is a simple article management system. A SQL injection vulnerability exists in the phpaaCMS article.add.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2017-17897
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...
PT-2017-15082 · Dolibarr · Dolibarr Erp/Crm
Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 6.0.4 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. The issue is related to the id parameter in the comm/multiprix.php file. Recommendations: For version 6.0.4, consider...
F5 BIG-IP Advanced Firewall Manager Configuration utility SQL Injection Vulnerability
F5 BIG-IP Advanced Firewall Manager AFM is a firewall manager from F5 USA that scales to stop high-volume DDoS attacks that can overwhelm load balancers, firewalls, and even networks.The Configuration utility... An SQL injection vulnerability exists in Configuration utility in F5 BIG-IP AFM. A...
CVE-2017-17823
The Configuration component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/configuration.php orderby array parameter. An attacker can exploit this to gain access to the data in a connected MySQL database...
Ecava IntegraXor SQL Injection Vulnerability (CNVD-2017-37693)
Ecava IntegraXor is a toolset for creating and running human-machine interfaces for Web-based SCADA systems. Ecava IntegraXor suffers from a SQL injection vulnerability that can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability i...
Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37638)
Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUPhaseStatus Count method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...
Apple Web Design's iWeb 5.1 Responsive Website System Has SQL Injection Vulnerability
Apple Web Design is a web marketing company that integrates web marketing, keyword marketing and other web marketing companies. An SQL injection vulnerability exists in Apple Web Design's iWeb 5.1 responsive website system. The vulnerability is caused due to the system failing to effectively filt...
Quest NetVault Backup 'NVBUBackupOptionSet Get' Method SQL Injection Vulnerability
Quest NetVault Backup is a suite of data backup software from Quest Software, USA. An SQL injection vulnerability exists in the handling of NVBUBackupOptionSet Get method requests in Quest NetVault Backup, which stems from the program failing to properly validate user-submitted strings before...
PHP Scripts Mall Event Search Script SQL Injection Vulnerability
PHP Scripts Mall Event Search Script is a PHP based online event registration script from PHP Scripts Mall India. The script can be embedded into a website and accept online event bookings from other organizations or companies. A SQL injection vulnerability exists in PHP Scripts Mall Event Search...
PHP Scripts Mall Yoga Class Script SQL Injection Vulnerability
PHP Scripts Mall Yoga Class Script is a PHP-based yoga class management script for yoga centers from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Yoga Class Script version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...
PHP Scripts Mall Realestate Crowdfunding Script SQL Injection Vulnerability
PHP Scripts Mall Realestate Crowdfunding Script is a PHP based real estate crowdfunding website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Realestate Crowdfunding Script version 2.7.2. A remote attacker can exploit the vulnerability by sending the...
PHP Scripts Mall Co-work Space Search Script SQL Injection Vulnerability
PHP Scripts Mall Co-work Space Search Script is a set of PHP based shared space search script by PHP Scripts Mall India. The script supports users to list workspace websites, amenities, location details, contact information etc. A SQL injection vulnerability exists in PHP Scripts Mall Co-work Spa...
Zhengzhou DynaSky Culture Communication Co., Ltd. website construction system SQL injection vulnerability
Zhengzhou Prime Technology Co., Ltd. specializes in providing customers with online business solutions in the field of information technology. Zhengzhou DynaSky Culture Communication Co., Ltd. website construction system has a SQL injection vulnerability, which can be exploited by attackers to...