EUVD-2018-17738

Malware in sbrugna...

Sql injection

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

CVE-2018-5973

CVE-2018-5973 affects the Professional Local Directory Script 1.0 (PHP/MySQL). The vulnerability is a SQL injection in which the attacker can inject SQL commands via the sellers_subcategories.php?IndustryID parameter, or via suppliers.php with IndustryID or CategoryID parameters. Reported PoCs an...

PT-2018-17259

Name of the Vulnerable Software and Affected Versions: Professional Local Directory Script version 1.0 Description: A SQL Injection issue exists in the software, specifically via the IndustryID parameter in the "sellers subcategories.php" and "suppliers.php" files, as well as the CategoryID...

CVE-2018-5973: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Professional Local Directory Script 1.0 via the sellerssubcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter...

seedquest.org XSS vulnerability

Vulnerable URL: http://www.seedquest.org/suppliers.php?field=veginc"=supplier=smulti Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...