662 matches found
CVE-2017-18364: Improper Neutralization of Input During Web Page Generation
phpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter...
PT-2019-8301
Name of the Vulnerable Software and Affected Versions phpFK lite affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the query string in faq.php, members.php, or search.php, or through the user parameter in user.php. Recommendations At the...
PT-2019-9540
Name of the Vulnerable Software and Affected Versions LayerBB versions prior to 1.1.3 Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to perform unauthorized actions such as adding a user via "admin/new user.php", deleting a user via...
CVE-2019-9594
BlueCMS 1.6 allows SQL Injection via the userid parameter in an uploads/admin/user.php?act=edit request...
CVE-2019-9594
BlueCMS 1.6 allows SQL Injection via the userid parameter in an uploads/admin/user.php?act=edit request...
CVE-2019-9594
CVE-2019-9594 affects BlueCMS 1.6 and describes an SQL injection vulnerability in the parameter user_id within the uploads/admin/user.php?act=edit request. The vulnerability allows bypassing authentication and manipulating the SQL queries executed by the application, leading to potential disclosu...
PT-2019-19734
Name of the Vulnerable Software and Affected Versions BlueCMS version 1.6 Description The issue allows SQL Injection via the user id parameter in a "uploads/admin/user.php?act=edit" request. Recommendations For BlueCMS version 1.6, consider restricting access to the...
CVE-2019-9594: Improper Neutralization of Special Elements used in an SQL Command
BlueCMS 1.6 allows SQL Injection via the userid parameter in an uploads/admin/user.php?act=edit request...
CVE-2019-7348
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
CVE-2019-7348
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
CVE-2019-7348
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
CVE-2019-7348
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
CVE-2019-7348
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
CVE-2019-7348
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
CVE-2019-7348: Improper Neutralization of Input During Web Page Generation
Self - Stored Cross Site Scripting XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user user.php because proper filtration is omitted...
PT-2019-18553 · Zoneminder +1 · Zoneminder +1
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.32.3 Description: The issue allows an attacker to execute HTML or JavaScript code via a vulnerable username parameter value in the user view user.php due to omitted proper filtration, leading to a persistent...
PT-2019-17966
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Advance Peer to Peer MLM Script version 1.7.0 Description The issue allows remote attackers to bypass intended access restrictions. This can be achieved by directly navigating to "admin/dashboard.php" or "admin/user.php",...
CVE-2019-6126: Direct Request
The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigating to admin/dashboard.php or admin/user.php, as demonstrated by disclosure of information about users and staff...
