|
252811
|
9.8 |
CRITICAL
Network
|
geniusocean
|
news
|
Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.
|
CWE-89
SQL Injection
|
CVE-2017-15982
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252812
|
9.8 |
CRITICAL
Network
|
geniusocean
|
newspaper
|
Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.
|
CWE-89
SQL Injection
|
CVE-2017-15981
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252813
|
9.8 |
CRITICAL
Network
|
rowindex
|
us_zip_codes_database_script
|
US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.
|
CWE-89
SQL Injection
|
CVE-2017-15980
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252814
|
9.8 |
CRITICAL
Network
|
odallated
|
shareet
|
Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.
|
CWE-89
SQL Injection
|
CVE-2017-15979
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252815
|
9.8 |
CRITICAL
Network
|
arox
|
school_erp_php_script
|
AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.
|
CWE-89
SQL Injection
|
CVE-2017-15978
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252816
|
9.8 |
CRITICAL
Network
|
protectedlinks
|
expiring_download_links
|
Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.
|
CWE-89
SQL Injection
|
CVE-2017-15977
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252817
|
5.4 |
MEDIUM
Network
|
synology
|
audio_station
|
Cross-site scripting (XSS) vulnerability in Custom Internet Radio List in Synology Audio Station before 6.3.0-3260 allows remote authenticated attackers to inject arbitrary web script or HTML via the…
|
CWE-79
Cross-site Scripting
|
CVE-2017-15888
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252818
|
7.5 |
HIGH
Network
|
watchdogdevelopment
|
anti-malware online_security_pro
|
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioc…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-15921
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252819
|
7.5 |
HIGH
Network
|
watchdogdevelopment
|
anti-malware online_security_pro
|
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioc…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-15920
|
2024-11-21 12:15 |
2017-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252820
|
7.2 |
HIGH
Network
|
eyesofnetwork
|
eyesofnetwork
|
SQL injection vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capaci…
|
CWE-89
SQL Injection
|
CVE-2017-16000
|
2024-11-21 12:15 |
2017-10-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|