12 matches found
EUVD-2006-7153
Malware in sbrugna...
EUVD-2009-1066
Malware in sbrugna...
74CMS SQL Injection Vulnerability (CNVD-2021-43389)
74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...
CVE-2020-22208
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22208: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php...
CVE-2020-22210: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in 74cms 3.2.0 via the x parameter to ajaxofficebuilding.php...
CVE-2009-3184: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in index.php in Pirates of The Caribbean in the E-Gold Game Series allow remote attackers to execute arbitrary SQL commands via the 1 x and 2 y parameters...
CVE-2009-1067: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter...
CVE-2009-1065: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7171: Improper Input Validation
productreview.php in Koan Software Mega Mall allows remote attackers to obtain the installation path via a request with an empty value of the x parameter...
CVE-2006-1561: Undefined Security Weakness
SQL injection vulnerability in index.php in vscripts aka Kuba Kunkiewicz VBook aka VBook 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter...
CVE-2005-2673: Undefined Security Weakness
SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 x or 2 y parameters...