CVE-2018-17136: Improper Neutralization of Special Elements used in an SQL Command

zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header...

viralmarketingbomb.com XSS vulnerability

Vulnerable URL: http://viralmarketingbomb.com/check.php?jsoncallback=prompt/OPENBUGBOUNTY/...

cuge.org XSS vulnerability

Vulnerable URL: http://www.cuge.org/fr/check.php?site=prompt/OPENBUGBOUNTY/...

zzcms user/check.php has arbitrary user password change vulnerability

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version of any user password change vulnerability, the vulnerability trigger point in /user/check.php, the attacker can take advantage of the vulnerability to...

Cross site scripting

Cross-site scripting XSS vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter...

CVE-2014-4564: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter...

PT-2014-5979

Name of the Vulnerable Software and Affected Versions Validated plugin versions 1.0.2 and earlier for WordPress Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the slug parameter in the check.php file...

PT-2014-2000

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS affected versions not specified Description The issue is related to insufficient input validation in the localJob.php and pre connect check.php scripts of the Seagate BlackArmor NAS web interface. This can be exploited b...

PT-2014-2001

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS affected versions not specified Description The issue is related to the backupmgt/pre connect check.php component of the Seagate BlackArmor NAS, which contains a hard-coded password for a backdoor user. This could allow ...

PT-2012-4746

Name of the Vulnerable Software and Affected Versions NeoInvoice affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the value parameter in a username action. This is related to a SQL injection vulnerability in the signup check.php...

Uploadify 2.1.4 Cross Site Scripting / Shell Upload

waraxe-2012-SA083 - Multiple Vulnerabilities in Uploadify 2.1.4 =============================================================================== Author: Janek Vind "waraxe" Date: 05. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-83.html Description of vulnerable software:...

PT-2011-4603

Name of the Vulnerable Software and Affected Versions cFTP version r80 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as templates/session check.php, which reveals the installation path i...

vAuthenticate 3.0.1 SQL Injection

----------------------------------------------------------------------- vAuthenticate 3.0.1 Auth Bypass by Cookie SQL Injection Vulnerability ----------------------------------------------------------------------- Author: bd0rk Contact: bd0rkathackermail.com Date: 2011 / 08 / 30 MEZ-Time: 01:35...

vAuthenticate 3.0.1 - Authentication Bypass

vAuthenticate 3.0.1 - Authentication Bypass ----------------------------------------------------------------------- vAuthenticate 3.0.1 Auth Bypass by Cookie SQL Injection Vulnerability ----------------------------------------------------------------------- Author: bd0rk Contact:...

RunCMS 2.1 - check.php Cross-Site Scripting

RunCMS 2.1 - check.php Cross-Site Scripting source: https://www.securityfocus.com/bid/41448/info RunCms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

CVE-2009-2160

TorrentTrader Classic 1.09 allows remote attackers to 1 obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to 2 obtain other potentially sensitive information via a direct request to check.php...

CVE-2009-2160

TorrentTrader Classic 1.09 is affected by an information disclosure vulnerability where remote attackers can retrieve configuration details via phpinfo.php (calls phpinfo) and potentially access other sensitive information via check.php. The NVD entry assigns a Medium base score (CVSSv2 5.0) with...

CVE-2009-2160: Undefined Security Weakness

TorrentTrader Classic 1.09 allows remote attackers to 1 obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to 2 obtain other potentially sensitive information via a direct request to check.php...

Yellow Duck Weblog 2.1.0 Local File Inclusion

=-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::Yellow Duck Weblog ------------------------------------------------- Author: ahmadbady =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- download...

Yellow Duck Weblog 2.1.0 (lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Yellow Duck Weblog 2.1.0 lang Local File Inclusion Vulnerability ================================================================== =-=-local file include-=-=...