Dell SonicWALL Scrutinizer 11.0.1 - setUserSkin/deleteTab SQL Injection Remote Code Execution

Exploit for windows platform in category remote exploits !/usr/local/bin/python """ Dell SonicWall Scrutinizer Summary: ======== This exploits an pre-auth SQL Injection in the login.php script within an update statement to steal session data. You could also steal login creds which require...

AnyMacro邮件系统 login.php POST参数F_email SQL注入漏洞

No description provided by source...

网康安全网关(Netentsec ASG) 6.3 /WebPages/login.php errstr参数XSS漏洞

No description provided by source...

PT-2016-1725

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 0.8.8g Description The issue is related to insufficient access control in the Cacti network monitoring tool. It allows a remote authenticated user to bypass intended access restrictions by logging in as a user not...

fxscripts.com XSS vulnerability

Vulnerable URL: https://fxscripts.com/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check fxscripts.c...

elkoubbi-osteo.com XSS vulnerability

Vulnerable URL: http://elkoubbi-osteo.com/login.php?username=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

iGenus mail system 5. 0 and the following version in the login. php at the presence of XSS vulnerabilities

No description provided by source...

PHP168 6.0及以下版本在文件login.php处存在利用生成的缓存PHP文件执行命令漏洞

No description provided by source...

thewizard.com XSS vulnerability

Vulnerable URL: http://thewizard.com/wiznet/inner-login.php?errmsg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 07.12.2015 Latest check for patch:| 07.12.2015 21:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

roer.se XSS vulnerability

Vulnerable URL: http://roer.se/login.php?ged="';--=index.php?ctype=gedcom=preview Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP...

schedule.mcairaviation.com XSS vulnerability

Vulnerable URL: http://schedule.mcairaviation.com/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

subammarriage.com XSS vulnerability

Vulnerable URL: http://www.subammarriage.com/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...

myheritage.jp XSS vulnerability

Vulnerable URL: http://www.myheritage.jp/FP/Company/login.php?email=%27%22%3E%3E%3C/title%3E%27%22%3ESC%20RIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:47 GMT Vulnerability...

iGENUS 邮件系统 V5.0 任意文件读取漏洞

login.php 文件中，选择语言环境后会读取语言文件，并加载到页面，后台接到请求后，没有对 Lang 参数过滤，就直接读取文件，从而造成任意文件读取漏洞。 http://221.130.182.230/igenus/login.php?Lang=../../../../../../../../../../etc/passwd%00.jpg...

platorodiamante.com XSS vulnerability

Vulnerable URL: http://www.platorodiamante.com/login.php?Error= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No...

brannk.no XSS vulnerability

Vulnerable URL: https://www.brannk.no/views/frontpage/login.php?error= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status...

epure.be XSS vulnerability

Vulnerable URL: http://www.epure.be/pm/security/login.php?Message=@CAPINVALIDSESSION@=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15520340 Google Pagerank| 0 VIP website...

CVE-2015-4658

CVE-2015-4658 is described across multiple sources as a SQL injection vulnerability in the Milw0rm Clone Script 1.0. The affected component is the admin/login.php script, with input fields (1) usr and (2) pwd used to construct SQL queries, enabling remote attackers to execute arbitrary SQL comman...

PT-2015-6656

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.3-2945 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the success parameter to "login.php" or crafted URL parameters to "index.php", suc...

PT-2015-6658

Name of the Vulnerable Software and Affected Versions Milw0rm Clone Script version 1.0 Description The issue concerns SQL injection vulnerabilities in the admin/login.php file. Remote attackers can execute arbitrary SQL commands by manipulating the usr or pwd parameters. Recommendations For Milw0...