CVE Vulnerability

CWE-89

CVE-2018-18822

by

Grapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref parameter.

CVE-2018-18832

by

admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp.

CVE-2018-18784

by

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. (This needs an admin user login.)

CVE-2018-18785

by

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php.

CVE-2018-18786

by

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie.

CVE-2018-18787

by

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie.