EUVD-2024-16294

Malicious code in bioql PyPI...

CVE-2024-13038

CVE-2024-13038 affects CodeAstro Simple Loan Management System v1.0, specifically the Login module’s /index.php. The vulnerability arises from manipulating the email parameter, causing SQL injection. It is exploitable remotely, and public exploits are disclosed. Multiple sources corroborate the i...

CVE-2024-5636 itsourcecode Bakery Online Ordering System index.php sql injection

A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be launched remotely. The...

PT-2020-17357

Name of the Vulnerable Software and Affected Versions ACS Advanced Comment System version 1.0 Description The issue allows Directory Traversal via the advanced component system/index.php API endpoint, specifically through the ACS path variable. This can be exploited by manipulating the ACS path...

CVE-2014-5387: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 columnfilter or 2 category parameter to system/index.php or the 3 tblsort0 parameter in the comment module to system/index.php...

PT-2014-6444

Name of the Vulnerable Software and Affected Versions EllisLab ExpressionEngine versions prior to 2.9.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the column filter or category parameter to "system/index.php" or the tbl sort...

CVE-2009-1070: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter...

CVE-2007-1242: Undefined Security Weakness

SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL commands via the PHPSESSID cookie. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...