الباحثون
رجوع
Doraemon Sk8Ers
باحث من
Team Doraemon.Sk8ers
#16190
من 60,594
19.3
إجمالي CVSS
الثغرات
·
3
متوسطة
1
عالية
2
PT-2014-2588
2014-02-28
7.5
CVE-2013-2498
Simplehrm
Simplehrm
The issue allows remote attackers to execute arbitrary SQL commands via the `username` parameter to "index.php/user/setLogin". This is a SQL injection vulnerability in the login page, specifically in the file flexycms/modules/user/user manager.php.
PT-2013-3374
2013-04-18
7.5
CVE-2013-1748
Php
Php Address Book
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting SQL injection vulnerabilities via unspecified parameters to API endpoints such as "edit.php" or "import.php".
PT-2013-3375
2013-04-18
4.3
CVE-2013-1749
Php
Php Address Book
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `Address` field in edit.php. This can be exploited by user-assisted attacks.