9 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-40315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A limited SQL injection risk was identified in the browse list of users site administration page. CVE-2022-40315 Note that Nessus relies on the presence of the...
BIT-MOODLE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page...
CVE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page...
CVE-2022-40315
A limited SQL injection risk was identified in the "browse list of users" site administration page...
cimbor.net XSS vulnerability
Vulnerable URL: https://cimbor.net/user/browse/ ?searchgender=gender from=from to=to country=countryalert'OPENBUGBOUNTY'...
CVE-2013-5121: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PHPFox before 3.6.0 build6 allows remote attackers to execute arbitrary SQL commands via the searchsortby parameter to user/browse/view/...
CVE-2013-5120: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PHPFox before 3.6.0 build4 allows remote attackers to execute arbitrary SQL commands via the searchgender parameter to user/browse/view/...
PT-2013-5370
Name of the Vulnerable Software and Affected Versions PHPFox versions prior to 3.6.0 build4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchgender parameter to the "/user/browse/view /" API endpoint. Recommendations For versions prio...
PT-2013-5371
Name of the Vulnerable Software and Affected Versions PHPFox versions prior to 3.6.0 build6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the searchsort by parameter to the "/user/browse/view /" API endpoint. Recommendations For versions pri...