Vulnerabilities in N/A

161,455 results
CVE-2018-6365—SQL Injection exists in TSiteBuilder 1.0 via the id parameter to /site.php, /pagelist.php, or /page_new.php.EPSS 3.0%CVE-2017-17601—Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.EPSS 3.0%CVE-2017-17609—Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.EPSS 3.0%CVE-2017-17603—Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice pEPSS 3.0%CVE-2017-17610—E-commerce MLM Software 1.0 has SQL Injection via the service_detail.php pid parameter, event_detail.php eventid parameter, or news_detail.pEPSS 3.0%CVE-2017-17608—Child Care Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2017-17602—Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.EPSS 3.0%CVE-2017-17624—PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.EPSS 3.0%CVE-2017-17614—Food Order Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2008-2228—PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when register_globals is enaEPSS 3.0%CVE-2007-1075—TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline cEPSS 3.0%CVE-2006-5427—PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_quotes_gpc is disablEPSS 3.0%CVE-2014-4466—WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cEPSS 3.0%CVE-2017-17651—Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/EPSS 3.0%CVE-2008-1862—ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackerEPSS 3.0%CVE-2013-6617—The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attaEPSS 3.0%CVE-2012-6084—modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during serEPSS 3.0%CVE-2014-0792—Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectoEPSS 3.0%CVE-2014-1608—SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to exEPSS 3.0%CVE-2017-6816—In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.EPSS 3.0%