PT-2018-12899

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 5.0.1.4 Description The issue allows a remote attacker to execute arbitrary SQL commands. This can be achieved via the eid, userid, or pid parameter in the "portal/add edit event user.php" file. Recommendations For...

Access Restriction Bypass

Wordpress is vulnerable to access restriction bypass. The newbloguser key is a string value which is derived from a userID. Attackers can bypass access restrictions by entering this string...

WordPress Active Directory Integration plugin <=1.1.8 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Lenon Leite in WordPress Active Directory Integration plugin versions = 1.1.8. The plugin is vulnerable due to unescaped $GET‘userid’. Solution 11/20/2017 - we were unable to find a patched version of this plugin...

CVE-2017-16821

b3log Symphony aka Sym 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid...

PT-2017-14581

Name of the Vulnerable Software and Affected Versions b3log Symphony aka Sym version 2.2.0 Description The issue concerns a problem where a crafted X-Forwarded-For HTTP header is mishandled, leading to XSS in the admin console. This occurs during the display of a client IP address in the...

Sql injection

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

CVE-2015-3933

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

PT-2017-6710

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.3-patch Description The issue concerns SQL injection vulnerabilities in the inc/lib/User.class.php file. Remote attackers can execute arbitrary SQL commands via the email parameter or the userid parameter to the...

CVE-2017-14943: Exposure of Sensitive Information to an Unauthorized Actor

Trapeze TransitMaster is vulnerable to information disclosure emails / hashed passwords via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the...

PT-2017-13768

Name of the Vulnerable Software and Affected Versions Trapeze TransitMaster affected versions not specified Description The issue allows for information disclosure, including emails and hashed passwords, through a modified userID field in JSON data sent to the "ManageSubscriber.aspx/GetSubscriber...

NexusPHP SQL Injection Vulnerability (CNVD-2017-220447)

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in the modtask.php file in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help of the...

CVE-2017-12909

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Sql injection

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2017-12909: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

PT-2017-12769

Name of the Vulnerable Software and Affected Versions NexusPHP version 1.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the userid parameter in the modtask.php file. Recommendations For NexusPHP version 1.5, avoid using the userid parameter...

Vulnerability in userid parameter of online customer service page of China Telecom's Palm Business Hall app.

China Telecom Pocket Business Office is a cell phone terminal-based application software that provides users with recharge and payment, cost inquiries and other services. The userid parameter in the online customer service page of China Telecom's Pocket Business Office app has an overstepping...

CVE-2017-7249: Improper Neutralization of Input During Web Page Generation

Multiple Cross-Site Scripting XSS were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data action, userid passed to the 'Gazelle-master/sections/tools/data/ocelotinfo.php' URL. An attacker could execute arbitrary HTML and script...

PT-2017-17610

Name of the Vulnerable Software and Affected Versions Gazelle versions prior to 2017-03-19 Description The issue is related to insufficient filtration of user-supplied data, specifically the action and userid variables, passed to the "Gazelle-master/sections/tools/data/ocelot info.php" URL. This...

Joomla! Component Soccer Bet 4.1.5 - 'userid' SQL Injection

Exploit Title: Joomla! Component Soccer Bet 4.1.5 - 'userid' Parameter SQL Injection Google Dork: inurl:index.php?option=comsoccerbet Date: 12.02.2017 Vendor Homepage: http://www.jomsoccerbet.com/ Software Buy:...

OpenSSL Vulnerabilities

The OpenSSL library embedded in the GlobalProtect™ agent, TerminalServer™ agent and UserID™ agent is affected by the following public vulnerabilities: CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176 Ref 100669, 100133, PAN-60833. At the time of this advisory and in t...