CVE-2023-5694

A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is an unknown function of the file pagessystemsettings.php. The manipulation of the argument sysname with the input alert991 leads to cross site scripting. It is possible to launch...

PT-2023-32267

Name of the Vulnerable Software and Affected Versions CodeAstro Internet Banking System version 1.0 Description A vulnerability was found in the CodeAstro Internet Banking System, classified as problematic. It affects an unknown function of the file pages system settings.php. The manipulation of...

CVE-2010-5317: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via 1 the filename parameter in an attachment action, 2 the post parameter in a showcomment action, 3 the sys-name parameter in an rssfeed action, or 4 the...

PT-2015-3473

Name of the Vulnerable Software and Affected Versions SweetRice CMS versions prior to 0.6.7.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters in different actions: the file name parameter in an attachment action, the pos...