PHP Scripts Mall Paid To Read Script SQL Injection Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can inject SQL into the Paid To Read Script 2.0.5 by sending the 'uid' parameter t...

CVE-2017-17776: Exposure of Sensitive Information to an Unauthorized Actor

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

SQL injection vulnerability in the uid parameter in the admin_members.php page of the Ocean CMS website builder system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the /admin/adminmembers.php page of the Ocean CMS system. The lack of filtering of the "uid" parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

Session fixation

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

CVE-2017-6529

CVE-2017-6529 affects dnaTools dnaLIMS 4-2015s13. The vulnerability allows session hijacking by guessing and supplying the UID parameter in URLs that require authentication, where the UID appears to serve as a session identifier. Public descriptions demonstrate that multiple pages rely on a UID p...

PT-2017-17131

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13 Description An issue was discovered in dnaLIMS, where it is vulnerable to session hijacking by guessing the UID parameter. Recommendations For dnaLIMS version 4-2015s13, consider implementing additional security...

CVE-2017-6529: Insufficient Session Expiration

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter. Recent assessments: h00die at March 27, 2020 4:08pm UTC reported: The uid field is passed within a GET parameter. These are sequential integers, so it is trivial to...

Video Sharing Script 4.94 - uid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Video Sharing Script 4.94 - 'uid' Parameter SQL Injection Google Dork: N/A Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/video-sharing-script/ Demo:...

PT-2017-1261

Name of the Vulnerable Software and Affected Versions Android versions that have qmi qos srvc.c Description The issue is related to a buffer overflow vulnerability while processing QMI QOS TLVs. This vulnerability can be exploited by a remote attacker to cause a denial of service through a...

PT-2017-1022

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is caused by a buffer overflow in the hypervisor of the Android operating system. This can be exploited by a local attacker through a specially crafted directory name, set in th...

Stack Overflow Vulnerability in Lovecraft PPS ActiveX Plugin

Aiki PPS ActiveX plugin is a browser-based flash playback control. A stack overflow vulnerability exists in the strUID and strCookie parameters of the Lovecraft PPS ActiveX plugin. An attacker can exploit the vulnerability to remotely execute arbitrary code, and a failed exploit can result in a...

Ocean CMS uid parameter has SQL injection vulnerability

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the uid parameter of the Ocean CMS i.php page. Attackers can use the vulnerability to obtain sensitive information in the website database...

ZENworks Configuration Management Code Execution

The vulnerability of the ZENworks Configuration Management information system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted directory name specified ...

CVE-2015-0779: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management ZCM 10 and 11 before 11.3.2 allows remote attackers to execute arbitrary code via a crafted directory name in the uid parameter, in conjunction with a WAR filename in the filename parameter and WAR...