deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-15924
Published: 2017-10-27
Description: In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configuration request received via 127.0.0.1 UDP traffic, related to the add_server, build_config, and construct_command_line functions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: http://openwall.com/lists/oss-security/2017/10/13/2; http://www.debian.org/security/2017/dsa-4009; https://github.com/shadowsocks/shadowsocks-libev/commit/c67d275803dc6ea22c558d06b1f7ba9f94cd8de3
CVE: CVE-2017-15928
Published: 2017-10-27
Description: In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/ohler55/ox/issues/194; https://rubygems.org/gems/ox/versions/2.8.0; https://github.com/ohler55/ox/issues/194
CVE: CVE-2016-5002
Published: 2017-10-27
Description: XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.
CVSS Score: 7.8 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2016/07/12/5; http://www.securityfocus.com/bid/91736; http://www.securitytracker.com/id/1036294
CVE: CVE-2016-5003
Published: 2017-10-27
Description: The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://www.openwall.com/lists/oss-security/2016/07/12/5; http://www.openwall.com/lists/oss-security/2020/01/16/1; http://www.openwall.com/lists/oss-security/2020/01/24/2
CVE: CVE-2017-15930
Published: 2017-10-27
Description: In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket pointer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=6fc54b6d2be8; http://hg.graphicsmagick.org/hg/GraphicsMagick?cmd=changeset%3Bnode=da135eaedc3b; http://www.securityfocus.com/bid/101607
CVE: CVE-2017-15931
Published: 2017-10-27
Description: In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101609; https://github.com/radare/radare2/commit/c6d0076c924891ad9948a62d89d0bcdaf965f0cd; https://github.com/radare/radare2/issues/8731
CVE: CVE-2017-15932
Published: 2017-10-27
Description: In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/101614; https://github.com/radare/radare2/commit/44ded3ff35b8264f54b5a900cab32ec489d9e5b9; https://github.com/radare/radare2/issues/8743
CVE: CVE-2014-3579
Published: 2017-10-27
Description: XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://activemq.apache.org/security-advisories.data/CVE-2014-3579-announcement.txt; http://seclists.org/oss-sec/2015/q1/428; http://www.securityfocus.com/bid/72508
CVE: CVE-2014-3600
Published: 2017-10-27
Description: XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors involving an XPath based selector when dequeuing XML messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611
References: http://activemq.apache.org/security-advisories.data/CVE-2014-3600-announcement.txt; http://seclists.org/oss-sec/2015/q1/427; http://www.securityfocus.com/bid/72510
CVE: CVE-2015-1835
Published: 2017-10-27
Description: Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote attackers to modify undefined secondary configuration variables (preferences) via a crafted intent: URL.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-apache-vulnerability-that-allows-one-click-modification-of-android-apps/; http://www.securityfocus.com/bid/74866; https://cordova.apache.org/announcements/2015/05/26/android-402.html
CVE: CVE-2017-13089
Published: 2017-10-27
Description: The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to skip the chunk in pieces of 512 bytes by using the MIN() macro, but ends up passing the negative chunk length to connect.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument.
CVSS Score: 8.8 (HIGH)
CWE: CWE-121, CWE-119
References: http://git.savannah.gnu.org/cgit/wget.git/commit/?id=d892291fb8ace4c3b734ea[PII_REDACTED]c215df3f; http://www.debian.org/security/2017/dsa-4008; http://www.securityfocus.com/bid/101592
CVE: CVE-2017-13090
Published: 2017-10-27
Description: The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in pieces of 8192 bytes by using the MIN() macro, but ends up passing the negative chunk length to retr.c:fd_read(). As fd_read() takes an int argument, the high 32 bits of the chunk length are discarded, leaving fd_read() with a completely attacker controlled length argument. The attacker can corrupt malloc metadata after the allocated buffer.
CVSS Score: 8.8 (HIGH)
CWE: CWE-122, CWE-119
References: http://git.savannah.gnu.org/cgit/wget.git/commit/?id=ba6b44f6745b14dce414761a8e4b35d31b176bba; http://www.debian.org/security/2017/dsa-4008; http://www.securityfocus.com/bid/101590
CVE: CVE-2017-15933
Published: 2017-10-27
Description: SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacity_per_device/index.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/101615; https://github.com/jsj730sos/cve/blob/master/Eonweb_module_capacity_per_device_index.php-SQL%20injection%20vulnerability; http://www.securityfocus.com/bid/101615
CVE: CVE-2017-15581
Published: 2017-10-27
Description: In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, despite the documentation that the product is intended for "a personal journal of ... secrets and feelings," which allows remote attackers to obtain sensitive information by sniffing the network during LoginActivity or NoteActivity execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html; https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa; https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html
CVE: CVE-2017-15582
Published: 2017-10-27
Description: In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the AES parameters, which makes it easier for attackers to obtain the cleartext of stored diary entries.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html; https://gist.github.com/anonymous/603b89f864a71426042b167cab557efa; https://1337sec.blogspot.de/2017/10/auditing-writediarycom-cve-2017-15581.html
CVE: CVE-2017-15934
Published: 2017-10-27
Description: Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d; https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE: CVE-2017-15935
Published: 2017-10-27
Description: Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d; https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE: CVE-2017-15936
Published: 2017-10-27
Description: In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent definitions page, the script will get executed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d; https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE: CVE-2017-15937
Published: 2017-10-27
Description: Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked (e.g., a /var/www pathname typically means Linux or UNIX).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d; https://medium.com/stolabs/security-issue-on-pandora-fms-enterprise-be630059a72d
CVE: CVE-2017-15938
Published: 2017-10-27
Description: dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/101610; https://blogs.gentoo.org/ago/2017/10/24/binutils-invalid-memory-read-in-find_abstract_instance_name-dwarf2-c/; https://security.gentoo.org/glsa/201801-01
CVE: CVE-2017-15939
Published: 2017-10-27
Description: dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.securityfocus.com/bid/101613; https://blogs.gentoo.org/ago/2017/10/24/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c-incomplete-fix-for-cve-2017-15023/; https://security.gentoo.org/glsa/201801-01
CVE: CVE-2017-15945
Published: 2017-10-27
Description: The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://bugs.gentoo.org/630822; https://security.gentoo.org/glsa/201711-04; https://bugs.gentoo.org/630822
CVE: CVE-2017-15946
Published: 2017-10-28
Description: In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/101942; https://www.vulnerability-lab.com/get_content.php?id=2061; http://www.securityfocus.com/bid/101942
CVE: CVE-2017-15947
Published: 2017-10-28
Description: Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=2072; https://www.vulnerability-lab.com/get_content.php?id=2072
CVE: CVE-2017-15948
Published: 2017-10-28
Description: Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.vulnerability-lab.com/get_content.php?id=2067; https://www.vulnerability-lab.com/get_content.php?id=2067
CVE: CVE-2017-15949
Published: 2017-10-28
Description: Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the log_id parameter to admin/editgroup.php.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://www.vulnerability-lab.com/get_content.php?id=2076; https://www.vulnerability-lab.com/get_content.php?id=2076
CVE: CVE-2017-15951
Published: 2017-10-28
Description: The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=363b02dab09b3226f3bd1420dad9c72b79a42a76; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10; http://www.securityfocus.com/bid/101621
CVE: CVE-2017-15953
Published: 2017-10-28
Description: bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and crash when processing a malformed CUE (.cue) file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/extramaster/bchunk/issues/2; https://github.com/hessu/bchunk/issues/1; https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
CVE: CVE-2017-15954
Published: 2017-10-28
Description: bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/extramaster/bchunk/issues/3; https://github.com/hessu/bchunk/issues/1; https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
CVE: CVE-2017-15955
Published: 2017-10-28
Description: bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on destination operand" and crash when processing a malformed CUE (.cue) file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/extramaster/bchunk/issues/4; https://github.com/hessu/bchunk/issues/2; https://lists.debian.org/debian-lts-announce/2017/11/msg00001.html
CVE: CVE-2006-5331
Published: 2017-10-29
Description: The altivec_unavailable_exception function in arch/powerpc/kernel/traps.c in the Linux kernel before 2.6.19 on 64-bit systems mishandles the case where CONFIG_ALTIVEC is defined and the CPU actually supports Altivec, but the Altivec support was not detected by the kernel, which allows local users to cause a denial of service (panic) by triggering execution of an Altivec instruction.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-19
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6c4841c2b6c32a134f9f36e5e08857138cc12b10; http://www.linuxgrill.com/anonymous/kernel/v2.6/ChangeLog-2.6.19; https://bugzilla.suse.com/show_bug.cgi?id=213229
CVE: CVE-2017-15956
Published: 2017-10-29
Description: ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://packetstormsecurity.com/files/144456/ConverTo-Video-Downloader-And-Converter-1.4.1-Arbitrary-File-Download.html; https://packetstormsecurity.com/files/144456/ConverTo-Video-Downloader-And-Converter-1.4.1-Arbitrary-File-Download.html
CVE: CVE-2017-15957
Published: 2017-10-29
Description: my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://packetstormsecurity.com/files/144431/Ingenious-School-Management-System-2.3.0-Arbitrary-File-Upload.html; https://www.exploit-db.com/exploits/43102/; https://packetstormsecurity.com/files/144431/Ingenious-School-Management-System-2.3.0-Arbitrary-File-Upload.html
CVE: CVE-2017-15958
Published: 2017-10-29
Description: D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144430/D-Park-Pro-Domain-Parking-Script-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43101/; https://packetstormsecurity.com/files/144430/D-Park-Pro-Domain-Parking-Script-1.0-SQL-Injection.html
CVE: CVE-2017-15959
Published: 2017-10-29
Description: Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-2007-6576.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144428/Adult-Script-Pro-2.2.4-SQL-Injection.html; https://www.exploit-db.com/exploits/43100/; https://packetstormsecurity.com/files/144428/Adult-Script-Pro-2.2.4-SQL-Injection.html
CVE: CVE-2017-15960
Published: 2017-10-29
Description: Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144429/Article-Directory-Script-3.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43099/; https://packetstormsecurity.com/files/144429/Article-Directory-Script-3.0-SQL-Injection.html
CVE: CVE-2017-15961
Published: 2017-10-29
Description: iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144432/iProject-Management-System-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43098/; https://packetstormsecurity.com/files/144432/iProject-Management-System-1.0-SQL-Injection.html
CVE: CVE-2017-15962
Published: 2017-10-29
Description: iStock Management System 1.0 allows Arbitrary File Upload via user/profile.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://packetstormsecurity.com/files/144433/iStock-Management-System-1.0-Arbitrary-File-Upload.html; https://www.exploit-db.com/exploits/43097/; https://packetstormsecurity.com/files/144433/iStock-Management-System-1.0-Arbitrary-File-Upload.html
CVE: CVE-2017-15963
Published: 2017-10-29
Description: iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144434/iTech-Gigs-Script-1.21-SQL-Injection.html; https://www.exploit-db.com/exploits/43096/; https://packetstormsecurity.com/files/144434/iTech-Gigs-Script-1.21-SQL-Injection.html
CVE: CVE-2017-15964
Published: 2017-10-29
Description: Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144082/Job-Board-Software-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43095/; https://packetstormsecurity.com/files/144082/Job-Board-Software-1.0-SQL-Injection.html
CVE: CVE-2017-15965
Published: 2017-10-29
Description: The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/101624; https://packetstormsecurity.com/files/144435/Joomla-NS-Download-Shop-2.2.6-SQL-Injection.html; https://www.exploit-db.com/exploits/43094/
CVE: CVE-2017-15966
Published: 2017-10-29
Description: The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/101694; https://packetstormsecurity.com/files/144436/Joomla-Zh-YandexMap-6.1.1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43093/
CVE: CVE-2017-15967
Published: 2017-10-29
Description: Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144437/Mailing-List-Manager-Pro-3.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43092/; https://packetstormsecurity.com/files/144437/Mailing-List-Manager-Pro-3.0-SQL-Injection.html
CVE: CVE-2017-15968
Published: 2017-10-29
Description: MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144438/MyBuilder-Clone-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43091/; https://packetstormsecurity.com/files/144438/MyBuilder-Clone-1.0-SQL-Injection.html
CVE: CVE-2017-15969
Published: 2017-10-29
Description: PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_catalog/category.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144439/PG-All-Share-Video-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43090/; https://packetstormsecurity.com/files/144439/PG-All-Share-Video-1.0-SQL-Injection.html
CVE: CVE-2017-15970
Published: 2017-10-29
Description: PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144440/PHP-CityPortal-2.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43089/; https://packetstormsecurity.com/files/144440/PHP-CityPortal-2.0-SQL-Injection.html
CVE: CVE-2017-15971
Published: 2017-10-29
Description: Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144441/Same-Sex-Dating-Software-Pro-1.0-SQL-Injection.html; https://www.exploit-db.com/exploits/43088/; https://packetstormsecurity.com/files/144441/Same-Sex-Dating-Software-Pro-1.0-SQL-Injection.html
CVE: CVE-2017-15972
Published: 2017-10-29
Description: SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15971.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://packetstormsecurity.com/files/144442/SoftDatepro-Dating-Social-Network-1.3-SQL-Injection.html; https://www.exploit-db.com/exploits/43087/; https://packetstormsecurity.com/files/144442/SoftDatepro-Dating-Social-Network-1.3-SQL-Injection.html