CVE-2018-9928

Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...

CVE-2018-9928

CVE-2018-9928 is a Cross-site scripting (XSS) vulnerability in MetInfo 6.0, located in save.php, allowing remote attackers to inject arbitrary script via the webname or weburl parameters. Affected software: MetInfo 6.0 (save.php). Root cause: unsanitized user input in webname/weburl leading to sc...

PT-2018-19096

Name of the Vulnerable Software and Affected Versions MetInfo version 6.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the webname or weburl parameter in the "save.php" file. Recommendations For MetInfo...

CVE-2018-9928: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in save.php in MetInfo 6.0 allows remote attackers to inject arbitrary web script or HTML via the webname or weburl parameter...

PT-2017-6149

Name of the Vulnerable Software and Affected Versions: WordPress post highlights plugin versions prior to 2.6.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the txt parameter in a headline action to "ajax/ph save.php" API endpoin...

CVE-2017-9771: Improper Control of Generation of Code

install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the databaseusername, databasehost, or databasepassword parameter...

PT-2017-19175

Name of the Vulnerable Software and Affected Versions WebsiteBaker version 2.10.0 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved via the database username, database host, or database password parameter in the install/save.php file. Recommendation...

SQL injection vulnerability in the save.php file of TreeHole's external link system

TreeHole Outbound Linking System is a free and open source outbound linking system. Treehole external link system save.php file SQL injection vulnerability , the vulnerability stems from x-forwarded-for failure to adequately filter , an attacker can exploit the vulnerability to access or modify...

PT-2017-16894

Name of the Vulnerable Software and Affected Versions Mail Masta plugin version 1.0 Description A SQL injection issue was discovered in the Mail Masta plugin for WordPress. This issue affects the /inc/campaign save.php endpoint, which requires authentication to the WordPress admin. The list id...

CVE-2016-4834: Undefined Security Weakness

modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticated users to create or modify user accounts via unspecified vectors...

PT-2016-6174

Name of the Vulnerable Software and Affected Versions Vtiger CRM versions 6.4.0 and earlier Description The issue concerns the modules/Users/actions/Save.php file in Vtiger CRM, which does not properly restrict user-save actions. This allows remote authenticated users to create or modify user...

MetInfo 5.1 /feedback/uploadfile_save.php 后门漏洞

No description provided by source...

Metinfo 5.0.2 save.php 远程密码修改

No description provided by source...

MetInfo 4.0 member/save.php 任意密码修改漏洞

No description provided by source...

Limesurvey Blind SQL Injection

Exploit Title: LimeSurvey Blind SQL injection Date: 20/02/2012 Author: TorTukiTu - OpenSphere Version: 1.91+ build 11804 Tested on: php ckeprotectedCckeprotectedC ------------------------------------------------------------------------- TorTukiTu - Killing Tortoise ,-"""-. oo./ / \ /\ /// \...

LimeSurvey (PHPSurveyor 1.91+ stable) - Blind SQL Injection

LimeSurvey PHPSurveyor 1.91+ stable - Blind SQL Injection Exploit Title: LimeSurvey Blind SQL injection Date: 20/02/2012 Author: TorTukiTu - OpenSphere Version: 1.91+ build 11804 Tested on: php ckeprotectedCckeprotectedC -------------------------------------------------------------------------...

Limesurvey (PHPSurveyor v.1.91+ stable) Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: LimeSurvey Blind SQL injection Author: TorTukiTu - OpenSphere Version: 1.91+ build 11804 Tested on: php ckeprotectedCckeprotectedC ------------------------------------------------------------------------- TorTukiTu - Killing...

CVE-2009-3188

The CVE-2009-3188 entry concerns phpSANE 0.5.0, where the save.php script’s file_save parameter allows remote file inclusion. The root cause is insufficient sanitization of user-supplied input used in including PHP code, enabling an attacker to execute arbitrary PHP on the server. Documented impa...

CVE-2009-3188

PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the filesave parameter...

CVE-2009-3188: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in save.php in phpSANE 0.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the filesave parameter...