NASA Singledop Library Code Execution Vulnerability

NASA Singledop is a software module written in Python for retrieving low-level 2D wind fields from actual or simulated Doppler radar data.NASA Singledop library Weather data is one of the libraries. The NASA Singledop library in NASA Singledop version 1.0 suffers from a security vulnerability. A...

FreeXL Heap Buffer Out-of-Bounds Read Vulnerability

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A heap buffer out-of-bounds read vulnerability exists in the 'readminibiffnextrecord' function in versions of FreeXL prior to 1.0.5. An attacker could exploi...

PT-2018-15507 · Sap · Sap Hana Extended Application Services

Name of the Vulnerable Software and Affected Versions: SAP HANA Extended Application Services version 1.0 Description: A controller user with SpaceAuditor authorization in a specific space could retrieve sensitive application data, such as service bindings, within that space. Recommendations: For...

E.I Hi-Tech Professional Local Directory Script SQL Injection Vulnerability

E.I Hi-Tech Professional Local Directory Script is a set of PHP and MySQL based scripts for creating local directories from E.I Hi-Tech Technolgies, USA. A SQL injection vulnerability exists in version 1.0 of E.I Hi-Tech Professional Local Directory Script. A remote attacker can create a local...

Microsoft ASP.NET Core Cross-Site Request Forgery Vulnerability

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A cross-site request forgery vulnerability exists in Microsoft ASP.NET Core...

Bus Booking Script SQL Injection Vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script version 1.0. The vulnerability can be exploited to inject SQL commands by sending the 'txtname' parameter to the admin/index.php file...

DomainSale PHP Script SQL Injection Vulnerability

DomainSale PHP Script is a set of scripts for online domain name selling websites based on PHP and MySQL. A SQL injection vulnerability exists in DomainSale PHP Script version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'id' parameter to the...

FS Olx Clone SQL Injection Vulnerability

FS Olx Clone is a set of PHP and MySQL based scripts for classifieds publishing websites. A SQL injection vulnerability exists in FS Olx Clone version 1.0. The vulnerability can be exploited by remote attackers to inject SQL commands by sending the 'scat' parameter to the subpage.php file or the...

FS Linkedin Clone SQL Injection Vulnerability

FS Linkedin Clone is a set of PHP and MySQL based scripts for job search and recruitment websites. A SQL injection vulnerability exists in FS Linkedin Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'grid' parameter to the group.php file, the 'fid' parameter to...

FS Grubhub Clone SQL Injection Vulnerability

FS Grubhub Clone is a set of PHP-based scripts for online food ordering websites. A SQL injection vulnerability exists in FS Grubhub Clone version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...

FS Groupon Clone SQL Injection Vulnerability

FS Groupon Clone is a set of PHP and MySQL based online transaction website scripts. The script supports a wide range of online transactions such as event bookings, travel bookings, merchandise purchases and community services. A SQL injection vulnerability exists in FS Groupon Clone version 1.0....

PHP Scripts Mall Professional Service Script SQL Injection Vulnerability

PHP Scripts Mall Professional Service Script is a set of PHP based professional service website scripts by PHP Scripts Mall India. The script is able to provide users with the required information about professional service providers. A SQL injection vulnerability exists in PHP Scripts Mall...

PHP Scripts Mall Event Search Script SQL Injection Vulnerability

PHP Scripts Mall Event Search Script is a PHP based online event registration script from PHP Scripts Mall India. The script can be embedded into a website and accept online event bookings from other organizations or companies. A SQL injection vulnerability exists in PHP Scripts Mall Event Search...

Simple Chatting System Arbitrary File Upload Vulnerability

Simple Chatting System is a PHP-based online chatting application. An arbitrary file upload vulnerability exists in Simple Chatting System version 1.0. The vulnerability can be exploited to upload arbitrary files via the view/myprofile.php file...

PHP Scripts Mall PHP Multivendor Ecommerce SQL Injection Vulnerability

PHP Scripts Mall PHP Multivendor Ecommerce is a set of PHP based ecommerce website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall PHP Multivendor Ecommerce version 1.0. A remote attacker can inject SQL by sending the 'sid' parameter to the...

CVE-2017-17608

Child Care Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17110

Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request...

SAP HANA Extended Application Services Security Bypass Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP, which provides data query functions that allow users to directly query and analyze a large amount of real-time business data.Extended Application Services XS is a development environment for application servers, Web server...

Unspecified Vulnerability in Apple iOS and macOS Sierra 802.1X

Apple iOS and macOS Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers. 802.1X is one of the Client or Server-based access control and authentication protocol components. A...

MyBuilder Clone SQL Injection Vulnerability

MyBuilder Clone is an e-commerce website building system. A SQL injection vulnerability exists in MyBuilder Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'subcategory' parameter to the phpsqlsearchgenxml.php file to inject SQL commands...