CVE-2010-4275

Radius Manager 3.8.0 is affected by multiple stored XSS vulnerabilities. The issue arises in the admin.php actions update_usergroup and store_nas, where unsanitized inputs for name/descr can inject arbitrary script/HTML. Exploitation requires an authenticated administrator; impact is limited to t...

PT-2010-5393

Name of the Vulnerable Software and Affected Versions Radius Manager version 3.8.0 Description The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved via the name or descr parameter in an "update usergroup" or "store nas" action to...

CVE-2010-4275: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 name or 2 descr parameter in an a updateusergroup or a b storenas action to admin.php...

CMScout 2.09 Cross Site Request Forgery

Vulnerability ID: HTB22719 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincmscout.html Product: CMScout Vendor: CMScout Team http://www.cmscout.co.za/ Vulnerable Version: 2.09 and probably prior versions Vendor Notification: 25 November 2010 Vulnerability Type: CSRF Cross-Site Request Forge...

Diferior 8.03 - Multiple Cross-Site Scripting Vulnerabilities

Diferior 8.03 - Multiple Cross-Site Scripting Vulnerabilities Vulnerability ID: HTB22721 Reference: http://www.htbridge.ch/advisory/storedxsscrosssitescriptingvulnerabilityindiferior.html Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably...

Jamb - Cross-Site Request Forgery (Add a Post)

!/usr/bin/python /\ \ /\ \ /'\ /\ \ \ \ /\ \ /\//\ \ /\ /\ \ \ \ \ \ \ \ \ /'\ /\ /\ \ \ \ /'\ \ \ \ \ /' \ /'\ /'\''\ /\ /\ \ \ \ \ \ / \ / | \ \\ /\ /\ \ \ \ \L\ /\ / /\ / \ /\ / \ / / \ \ / \ / \ \\ \\ / ,\ \ \ \ \ \ \x/' // //// ////// // /, ///...

nileweb School CMS injection vulnerability and repair programme-vulnerability warning-the black bar safety net

nileweb School CMS program index. php parameter filtering is not strictly the presence of injection vulnerabilities. Batch google. cn inurl:index. php? action= http://localhost/index.php?action=cms/showpaget&pageid=-21+/! uniOn/+select+1,convertgrOupcOncatusername,0x3a,password using...

Jax Guestbook admin bypass vulnerability

Exploit for php platform in category web applications ======================================== Jax Guestbook admin bypass vulnerability ======================================== Exploit Title: Jax Guestbook admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software...

Sql injection

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...

CVE-2010-3608

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...

CVE-2010-3608: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...

CVE-2009-4980

Multiple cross-site scripting XSS vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 where parameter to search.php and 2 qc parameter to admin.php...

CVE-2009-4980: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Photokorn Gallery 1.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 where parameter to search.php and 2 qc parameter to admin.php...

CVE-2010-2614

SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in an editpage action...

CVE-2010-2614

Grafik CMS 1.1.2 (admin/admin.php) is affected by an SQL injection via the id parameter in the edit_page action. All connected sources consistently describe this vulnerability and its impact as arbitrary SQL execution on remote attackers; details on vulnerable versions beyond 1.1.2 are not explic...

CVE-2010-2615

Grafik CMS 1.1.2 (admin/admin.php) contains Cross-Site Scripting (XSS) flaws that allow injection of arbitrary HTML/JS via the page_menu (settings) and description (edit_page) parameters. The vulnerability arises from input sanitization errors in /admin/admin.php. Exploitation requires the attack...

CVE-2010-2614: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the id parameter in an editpage action...

CVE-2010-2615: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 pagemenu and 2 description parameters in an editpage action...

Grafik CMS - admin.php SQL Injection Cross-Site Scripting

Grafik CMS - admin.php SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41227/info Grafik CMS is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these...

OneCMS 2.6.1 - 'cat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/41194/info OneCMS is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how t...