Vulnerabilidades en N/A
161.455 resultadosCVE-2017-17645—Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.EPSS 3.0%CVE-2017-17624—PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat or chid1 parameter.EPSS 3.0%CVE-2006-5427—PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_quotes_gpc is disablEPSS 3.0%CVE-2017-17573—FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.EPSS 3.0%CVE-2017-17623—Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.EPSS 3.0%CVE-2017-17620—Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.EPSS 3.0%CVE-2017-17607—CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.EPSS 3.0%CVE-2017-17605—Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.EPSS 3.0%CVE-2017-17604—Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.EPSS 3.0%CVE-2017-17626—Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.EPSS 3.0%CVE-2019-7564—An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn'EPSS 3.0%CVE-2007-5540—Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the samEPSS 3.0%CVE-2010-3841—Multiple cross-site scripting (XSS) vulnerabilities in lib/TWiki.pm in TWiki before 5.0.1 allow remote attackers to inject arbitrary web scrEPSS 3.0%CVE-2018-6367—SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Clone 2.9.9 via the /chat_im/chat_window.php request_id parameter or the /search_eEPSS 3.0%CVE-2021-44132—A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13_X139 allows attackers to execute arbitrary EPSS 3.0%CVE-2014-0792—Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectoEPSS 3.0%CVE-2021-30124—The unofficial vscode-phpmd (aka PHP Mess Detector) extension before 1.3.0 for Visual Studio Code allows remote attackers to execute arbitraEPSS 3.0%CVE-2014-1608—SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to exEPSS 3.0%CVE-2013-6617—The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attaEPSS 3.0%CVE-2005-2712—The LDAP server (nldap.exe) in IBM Lotus Domino before 7.0.1, 6.5.5, and 6.5.4 FP2 allows remote attackers to cause a denial of service (craEPSS 3.0%