EUVD-2006-0357

Malware in sbrugna...

PT-2022-18397

Name of the Vulnerable Software and Affected Versions Cscms Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. It affects the component dance Topic.php del. Recommendations For Cscms Music Portal System version 4.2, consider restricting access to th...

Simple Forum-Discussion System SQL Injection Vulnerability

Simple Forum-Discussion System is a simple forum/discussion system. SQL injection vulnerability exists in Simple Forum-Discussion System, which originates in various components such as manage topic.php, manage user.php and ajax.php. Lack of validation of externally entered SQL statements. An...

CVE-2020-35337

ThinkSAAS before 3.38 contains a SQL injection vulnerability through app/topic/action/admin/topic.php via the title parameter, which allows remote attackers to execute arbitrary SQL commands...

PT-2021-11754

Name of the Vulnerable Software and Affected Versions: ThinkSAAS versions prior to 3.38 Description: The issue allows remote attackers to execute arbitrary SQL commands through a SQL injection vulnerability. This vulnerability is exploited through the "app/topic/action/admin/topic.php" endpoint v...

CVE-2020-35337: Improper Neutralization of Special Elements used in an SQL Command

ThinkSAAS before 3.38 contains a SQL injection vulnerability through app/topic/action/admin/topic.php via the title parameter, which allows remote attackers to execute arbitrary SQL commands...

PT-2017-5838

Name of the Vulnerable Software and Affected Versions: vBulletin Tapatalk plugin versions 4.9.0 and earlier vBulletin Tapatalk plugin versions 5.x through 5.2.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to specific endpoints,...

vinland.as XSS vulnerability

Vulnerable URL: http://www.vinland.as/topic.php?Name=OmOss" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check vinland.as SSL...

WeCenter SQL注射（ROOT SHELL）

简要描述： WeCenter SQL注射（ROOT SHELL） 详细说明： ajax.php： public function questionlistaction if $GET'featureid' if $topicids = $this-model'feature'-gettopicsbyfeatureid$GET'featureid' $GET'topicid' = implode',', $topicids; switch $GET'type' case 'best': $actionlist =...

camera life 2.6.2b4 (sql/xss) Multiple Vulnerabilities

No description provided by source. Cameralife 2.6.2b4 SQL/XSS Multiple Remote Vulnerabilities Script:Cameralife 2.6.2b4 Download:http://nchc.dl.sourceforge.net/sourceforge/fdcl/cameralife-2.6.2b4.zip Author:BackDoor Bug 1;album.php Remote SQL Injection Vulnerability...

PT-2014-4364

Name of the Vulnerable Software and Affected Versions Command School Student Management System version 1.06.01 Description The issue affects the Command School Student Management System, allowing remote attackers to exploit multiple cross-site request forgery CSRF vulnerabilities. This can lead t...

PT-2014-4363

Name of the Vulnerable Software and Affected Versions Command School Student Management System version 1.06.01 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the...

Code injection

ar web content manager AWCM 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service disk consumption via the coment parameter to 1 showvideo.php or 2 topic.php...

CVE-2012-2438: Undefined Security Weakness

ar web content manager AWCM 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service disk consumption via the coment parameter to 1 showvideo.php or 2 topic.php...

PT-2012-4044

Name of the Vulnerable Software and Affected Versions ar web content manager AWCM version 2.2 Description The issue allows remote attackers to cause a denial of service due to disk consumption. This can be achieved by submitting a large number of comment records through HTTP requests to specific...

SiteGenius Blind SQL injection Vulnerability

Exploit for php platform in category web applications ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author ...

SiteGenius - Blind SQL Injection

SiteGenius - Blind SQL Injection ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author : AutoRUN & dR.sqL Ho...

Zomorrod Cms Sql Injection Vulnerability

Exploit for php platform in category web applications ======================================== Zomorrod Cms Sql Injection Vulnerability ======================================== Application Info: Name: Zomorrod Cms Vendor: http://www.zomorrod.net Vulnerability:...

CVE-2007-6727: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in topic.php in KerviNet Forum 1.1 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

CVE-2009-1259: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/bb/topic.php in Insane Visions AdaptBB 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a topic action to index.php...