PT-2018-4034

Name of the Vulnerable Software and Affected Versions PacketFence versions prior to 3.0.2 Description The issue allows remote attackers to bypass authentication. This is possible due to the check password function in html/admin/login.php allowing an empty password. Recommendations For versions...

PT-2018-4035

Name of the Vulnerable Software and Affected Versions PacketFence versions prior to 3.0.2 Description The issue allows remote attackers to conduct LDAP injection attacks, which can lead to authentication bypass via a crafted username. This is related to the html/admin/login.php file...

CVE-2011-4068: Improper Authentication

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2011-4069: Improper Neutralization of Special Elements used in an LDAP Query

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...

CVE-2018-5979

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

PT-2018-17265

Name of the Vulnerable Software and Affected Versions: Wchat Fully Responsive PHP AJAX Chat Script version 1.5 Description: The issue exists due to SQL Injection in the login.php file, specifically via the User field. This allows for potential exploitation. Recommendations: For Wchat Fully...

CVE-2018-5979: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

CVE-2018-5978: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Facebook Style Php Ajax Chat Zechat 1.5 via the login.php User field...

PT-2018-17264

Name of the Vulnerable Software and Affected Versions: Facebook Style Php Ajax Chat Zechat version 1.5 Description: A SQL Injection issue exists in the login functionality. The User field in the login.php file is vulnerable to SQL injection attacks. Recommendations: For version 1.5, consider...

ndm.anmw.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-526480 Description| Value ---|--- Affected Website:| ndm.anmw.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

atherton.net XSS vulnerability

Open Bug Bounty ID: OBB-521640 Description| Value ---|--- Affected Website:| atherton.net Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosur...

CVE-2017-17970

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to login.php; the 2 seasonid parameter to themes/flixer/ajax/loadseason.php; the 3 movieid parameter to themes/flixer/ajax/getrating.php; the 4 rating or 5 movie...

PT-2018-6600

Name of the Vulnerable Software and Affected Versions: Muviko version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several parameters, including the email parameter to "login.php", the season id parameter to "themes/flixer/ajax/loa...

CVE-2017-17970: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 email parameter to login.php; the 2 seasonid parameter to themes/flixer/ajax/loadseason.php; the 3 movieid parameter to themes/flixer/ajax/getrating.php; the 4 rating or 5 movie...

Muviko 1.1 SQL Injection

Exploit Title: Muviko 1.1 - Multiple SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 09/01/2018 CVE: CVE-2017-17970 Vendor Homepage: https://www.muvikoscript.com Version: 1.1 Tested on: Mac OS...

Muviko 1.1 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Muviko 1.1 - Multiple SQL Injection Exploit Author: Ahmad Mahfouz Contact: http://twitter.com/eln1x Date: 09/01/2018 CVE: CVE-2017-17970 Vendor Homepage: https://www.muvikoscript.com Version: 1.1 Tested on: Mac OS...

terrasim.com XSS vulnerability

Open Bug Bounty ID: OBB-490284 Description| Value ---|--- Affected Website:| terrasim.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

imperfectproduce.com XSS vulnerability

Open Bug Bounty ID: OBB-484990 Description| Value ---|--- Affected Website:| imperfectproduce.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

plotexchange.com XSS vulnerability

Open Bug Bounty ID: OBB-484358 Description| Value ---|--- Affected Website:| plotexchange.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

padigift.com XSS vulnerability

Open Bug Bounty ID: OBB-472343 Description| Value ---|--- Affected Website:| padigift.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...