CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

PT-2017-17072

Name of the Vulnerable Software and Affected Versions Dotclear version 2.11.2 Description A cross-site scripting issue was found, affecting the "admin/blogs.php" and "admin/users.php" API endpoints, specifically the sortby and order parameters. Recommendations For Dotclear version 2.11.2, conside...

CVE-2017-6446: Improper Neutralization of Input During Web Page Generation

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

PT-2015-6844

Name of the Vulnerable Software and Affected Versions wp-championship plugin version 5.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in the cs admin users.php file, specifically via the user, isadmin, mail...

PT-2015-7308

Name of the Vulnerable Software and Affected Versions Pligg CMS version 2.0.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to "admin/admin users.php". Recommendations...

PT-2015-4280

Name of the Vulnerable Software and Affected Versions MyWebsiteAdvisor Simple Security plugin versions 1.1.5 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the datefilter parameter in the "access log" page to...

CVE-2014-9570: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the MyWebsiteAdvisor Simple Security plugin 1.1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 datefilter parameter in the accesslog page to wp-admin/users.php or 2 simplesecurityipblacklist...

Eggblog 3.1 admin/users.php add Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21134/info Eggblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

PT-2012-4378

Name of the Vulnerable Software and Affected Versions Pligg CMS versions prior to 1.2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved through several parameters in different actions and files, including the "list" parameter in a move action ...

PT-2012-1327

Name of the Vulnerable Software and Affected Versions e107 versions prior to 0.7.23 Description The issue concerns a predictable random token used in the cross-site request forgery CSRF protection mechanism. This allows remote attackers to hijack the authentication of administrators for requests...

CVE-2009-1775: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/applications.php, 2 admin/appsgroup.php, 3 admin/users.php, 4 admin/usersgroup.php, and 5 admin/tasks.php; 6 show...

Sql injection

Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...

CVE-2008-5434

Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...

CVE-2008-5434

Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...

CVE-2008-5434: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PunBB 1.3 and 1.3.1 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 orderby or 2 direction parameter to admin/users.php, or 3 configuration options to admin/settings.php...

CVE-2008-1304: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 inviteemail parameter in an invite action to wp-admin/users.php and the 2 to parameter in a sent action to wp-admin/invites.php...

CVE-2007-2715: Undefined Security Weakness

Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the 1 username, or the 2 password and password2 parameters in an edit action...

CVE-2006-6046: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 edit parameter to a admin/articles.php or b admin/comments.php, or the 2 add parameter to admin/users.php...

Eggblog 3.1 admin/users.php add Parameter XSS

Eggblog 3.1 admin/users.php add Parameter XSS. CVE-2006-6046. Webapps exploit for php platform source: http://www.securityfocus.com/bid/21134/info Eggblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...

CVE-2005-3556: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listname parameter in a admin/editlist.php, 2 title parameter in b admin/spageedit.php, 3 title field in c admin/template.php, 4 filter, 5 delete...