CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user.
Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read arbitrary files via directory traversal sequences in a pagename argument in the (1) handle_edit and (2) handle_raw functions.
Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file.
Ez_career, Ez_hotscripts-likesite, Affiliate_directory, Ez_adult_directory, Ez_affiliate, Ez_auction, Ez_baby, Ez_biz_pro, Ez_e-store, Ez_forum
2017-09-29
N/A
N/A
SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
Ez_career, Ez_hotscripts-likesite, Affiliate_directory, Ez_adult_directory, Ez_affiliate, Ez_auction, Ez_baby, Ez_biz_pro, Ez_e-store, Ez_forum
2017-09-29
N/A
N/A
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
Ez_career, Ez_hotscripts-likesite, Affiliate_directory, Ez_adult_directory, Ez_affiliate, Ez_auction, Ez_baby, Ez_biz_pro, Ez_e-store, Ez_forum
2017-09-29
N/A
N/A
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
Ez_career, Ez_hotscripts-likesite, Affiliate_directory, Ez_adult_directory, Ez_affiliate, Ez_auction, Ez_baby, Ez_biz_pro, Ez_e-store, Ez_forum
2017-09-29
N/A
N/A
SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
Ez_career, Ez_hotscripts-likesite, Affiliate_directory, Ez_adult_directory, Ez_affiliate, Ez_auction, Ez_baby, Ez_biz_pro, Ez_e-store, Ez_forum
2017-09-29
N/A
N/A
SQL injection vulnerability in directory.php in Scripts for Sites (SFS) SFS EZ Affiliate allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
4nchat, 4ndvddb, Book, Easycontent_module, Kose_yazilari_module, Kutubisitte_component, Myheadlines, Nukestyles_viewpage_module, Okul_module, Php-nuke
2017-08-17
N/A
N/A
SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to modules.php.
Ez_career, Ez_hotscripts-likesite, Affiliate_directory, Ez_adult_directory, Ez_affiliate, Ez_auction, Ez_baby, Ez_biz_pro, Ez_e-store, Ez_forum
2017-09-29
N/A
N/A
SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter.