CVE-2017-14247

SQL Injection exists in the EyesOfNetwork web interface aka eonweb 5.1-0 via the userid cookie to header.php, a related issue to CVE-2017-1000060...

Privilege Escalation

WordPress is vulnerable to privilege escalation attacks. The attacks are possible through changing the userID parameter in wp-admin/includes/post.php, allowing any authenticated users to create a post as if written by another user...

Pornhub: Add a video to favourite list of any user [via YouPorn API / FrontEnd]

Researcher was able to modify the 'userid' value when adding favorites via the YouPorn mobile API in order to add videos to other users' favorites...

Limits of the OA system /inc/finger/use_finger.php file USER_ID parameter SQL injection vulnerability

No description provided by source...

phpok最新版一处注入

简要描述： 最近没什么代码审计漏洞 给个前台呗 详细说明： phpok最新版 20141119 问题文件：/framework/model/data.php //还是老问题 //取得文章列表 public function arclist$rs 第102-105行: if$rs'userid' $sql.= "AND l.userid IN".$rs'userid'." "; $rs'userid' 是直接进入查询的造成注入 现在就是找哪个地方应用了 function arclist是从 function arclist过来的 找下arclist 找了下一共2个地方 一个不行 另一个就可...

Sql injection

SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the userid parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php...

CVE-2014-5520

SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the userid parameter to plugins/webform/new-form.php, which is not properly handled by plugins/useradmin/fingeruser.php...

Silver Peak VX < 6.2.4 XSS

The Silver Peak VX install hosted on the remote web server is affected by a cross-site scripting XSS vulnerability in the 'userid' parameter of the '/php/useraccount.php' script. An attacker can leverage this issue to inject arbitrary HTML and script code into a user's browser to be executed with...

Cross site scripting

Cross-site scripting XSS vulnerability in php/useraccount.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary web script or HTML via the userid parameter...

Phpkit 1.6.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. Phpkit 1.6.1 SQL Injection member.php | | ||| | | | | | -| .'| || | | | -| | | -| | || ||,|||| ||||| ||| ||||| Script: Phpkit 1.6.1 SQL Injection member.php Vulnerabilities SQL Injection Language: PHP Download: this script is for free Founder: ea$y laster Peace ...

Joomla Component rapidrecipe <= 1.6.5 - SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomrapidrecipe AUTHOR : S@BUN HOME : http://www.hackturkiye.com MAİL : [email protected] DORK 1 : allinurl: comrapidrecipeuserid DORK 2 : allinurl: comrapidrecipe categoryid EXPLOIT : after userid or catogryid add exploit...

PHP Script Tools PSY Auction 0 email_request.php user_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17974/info PSY Auction is prone to multiple input-validation vulnerabilities. The issues include HTML-injection and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

CVE-2012-5336

lib/base.php in ownCloud before 4.0.8 does not properly validate the userid session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV...

CVE-2012-5336

lib/base.php in ownCloud before 4.0.8 does not properly validate the userid session variable, which allows remote authenticated users to read arbitrary files via vectors related to WebDAV...

U-Mail任意文件上传漏洞一枚

简要描述： U-Mail存一处任意文件上传漏洞。 详细说明： 先登录官方测试站点： 这里登录的账号为：mailtest3721 再获取当前登录用户的userid http://mail.comingchina.com/webmail/client/oab/index.php?module=operate&action=member-get&page=1&orderby=&isreverse=1&keyword=mailtest3721 这里mailtest3721对应的userid为:78609 html exp: 上传文件： 上传后获取"fileid":"13995534500" im...

EasyTalk越权查看任意用户的消息

简要描述： EasyTalk越权查看任意用户的消息 详细说明： 出现问题的代码文件路径 : easytalk/Home/Lib/Action/ImAction.class.php 代码加载时，没要求登录 public function initialize parent::init; 出现问题的代码在这里 //获得历史聊天记录 public function getDayRecord $uid=intval$POST'userid'; $user=M'Users'-where"userid='$uid'"-find; if $user...

phpshe的SQL注入漏洞一枚

简要描述： phpshe 注入漏洞 详细说明： module/index/order.php case 'cartnum': $money'orderproductmoney' = $money'orderwlmoney' = $money'ordermoney' = 0; if pelogin'user' $result = $db-peupdate'cart', array'userid'=$suserid, 'productid'=$gproductid, //这里的$gproductid和gproductnum没有过滤导致了注入...

WordPress /wp-admin/includes/post.php user_ID 参数操作权限提升漏洞

Bugtraq ID:62346 CVE ID:CVE-2013-4340 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志 WordPress wp-admin/includes/post.php脚本在处理'userID'参数时存在一个安全漏洞，允许远程攻击者利用漏洞提供修改过的userID参数伪造任意帖子的作者 0 WordPress 3.6 厂商解决方案 WordPress 3.6.1已经修改该漏洞，建议用户下载更新： http://codex.wordpress.org/Version3.6.1...

Server: Auth bypass in /lib/base.php

/lib/base.php before ownCloud 4.0.8 does not properly validate the userid session variable via WebDAV, which allows authenticated attackers to gain access to other users files. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

CVE-2008-7309

Insoshi before 20080920 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the ForumPost userid value via a modified URL, related to a "mass assignment" vulnerability...