Pesquisadores
Voltar
Doraemon Sk8Ers
Pesquisador de
Team Doraemon.Sk8ers
#16190
de 60,594
19.3
CVSS total
Vulnerabilidades
·
3
Média
1
Alta
2
PT-2014-2588
2014-02-28
7.5
CVE-2013-2498
Simplehrm
Simplehrm
The issue allows remote attackers to execute arbitrary SQL commands via the `username` parameter to "index.php/user/setLogin". This is a SQL injection vulnerability in the login page, specifically in the file flexycms/modules/user/user manager.php.
PT-2013-3374
2013-04-18
7.5
CVE-2013-1748
Php
Php Address Book
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting SQL injection vulnerabilities via unspecified parameters to API endpoints such as "edit.php" or "import.php".
PT-2013-3375
2013-04-18
4.3
CVE-2013-1749
Php
Php Address Book
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `Address` field in edit.php. This can be exploited by user-assisted attacks.