Page 36 of 201 results (0.011 seconds)

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2

CVE-2017-17607 – CMS Auditor Website 1.0 - SQL Injection

https://notcve.org/view.php?id=CVE-2017-17607

CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail. CMS Auditor Website 1.0 tiene una inyección SQL mediante el parámetro PATH_INFO en /news-detail. • https://www.exploit-db.com/exploits/43272 https://packetstormsecurity.com/files/145293/CMS-Auditor-Website-1.0-SQL-Injection.html • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 1

CVE-2017-14600

https://notcve.org/view.php?id=CVE-2017-14600

Pragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET['del_black'], resulting in Information Disclosure. Pragyan CMS v3.0 es vulnerable a una inyección SQL basada en errores en cms/admin.lib.php mediante $_GET['del_black']. Esto deriva en una divulgación de información. • https://github.com/delta/pragyan/issues/228 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 1

CVE-2017-14601

https://notcve.org/view.php?id=CVE-2017-14601

Pragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET['forwhat'], resulting in Information Disclosure. Pragyan CMS v3.0 es vulnerable a una inyección SQL basada en valores booleanos en cms/admin.lib.php mediante $_GET['forwhat']. Esto deriva en una divulgación de información. • https://github.com/delta/pragyan/issues/228 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2015-4627

https://notcve.org/view.php?id=CVE-2015-4627

SQL injection vulnerability in Pragyan CMS 3.0. Existe una vulnerabilidad de inyección SQL en Pragyan CMS 3.0. • https://github.com/delta/pragyan/issues/207 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2017-11325

https://notcve.org/view.php?id=CVE-2017-11325

An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php. Se detectó un problema en Tilde CMS versión 1.0.1. Los archivos arbitrarios se pueden leer por medio de un ataque file=../ en actionphp/download.File.php. • https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •