Sql injection

Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter...

kotabogor.go.id XSS vulnerability

Open Bug Bounty ID: OBB-417087 Description| Value ---|--- Affected Website:| kotabogor.go.id Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Threat Outbreak Alert RuleID31157: Email Messages Distributing Malicious Software on November 13, 2017

Medium Alert ID: 55885 First Published: 2017 November 13 13:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31157 may contain the following files: Name |...

velo.hu XSS vulnerability

Open Bug Bounty ID: OBB-411538 Description| Value ---|--- Affected Website:| velo.hu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

ecoblog.it XSS vulnerability

Open Bug Bounty ID: OBB-407566 Description| Value ---|--- Affected Website:| ecoblog.it Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

UBUNTU-CVE-2017-16671

A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrari...

Asterisk Memory Leak Vulnerability

Asterisk is prone to a memory/RTP/file descriptor leak vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ManageEngine Applications Manager 13 - SQL Injection

ManageEngine Applications Manager 13 - SQL Injection ManageEngine Applications Manager version 13 suffers from multiple post-authentication SQL injection vulnerabilities. Proof of Concept 1 name= parameter is susceptible: POST /manageApplications.do?method=insert HTTP/1.1 Host: 192.168.1.190:9090...

ManageEngine Applications Manager < 13500 SQL Injection Vulnerability

ManageEngine Applications Manager is prone to a SQL injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-16542

Zoho ManageEngine Applications Manager 13 before build 13500 allows Post-authentication SQL injection via the name parameter in a manageApplications.do?method=insert request...

merciari.it XSS vulnerability

Vulnerable URL: http://www.merciari.it/dettaglio.php?ID=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5069876 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerabili...

poloniawholandii.com XSS vulnerability

Vulnerable URL: http://www.poloniawholandii.com/artykul.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 618561 VIP website status:| No Coordinated Disclosure Timeline:...

gulfvisit.com XSS vulnerability

Vulnerable URL: http://gulfvisit.com/index.php?searchkeyword=x%22%3E%3CsvG%20onLoad=prompt9%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 75641 VIP website status:| No...

Threat Outbreak Alert RuleID30955: Email Messages Distributing Malicious Software on October 13, 2017

Medium Alert ID: 55615 First Published: 2017 October 13 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30955 may contain the following files: Name |...

Threat Outbreak Alert RuleID30975: Email Messages Distributing Malicious Software on October 13, 2017

Medium Alert ID: 55610 First Published: 2017 October 13 16:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30975 may contain the following files: Name |...

printablepaper.net XSS vulnerability

Vulnerable URL: https://www.printablepaper.net/?q=%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 51799 VIP website status:| No...

parkerhannifin.be XSS vulnerability

Vulnerable URL:...

magic-nlp.info XSS vulnerability

Vulnerable URL: http://www.magic-nlp.info/shop/showcatrows.php?CategoryID=2"/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15326971 VIP website status:| No Coordinated Disclosure...

pop3.webmail.co.za XSS vulnerability

Vulnerable URL: http://pop3.webmail.co.za/lostpassword.php?email=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20169 VIP website status:| Ye...

sol-r.net XSS vulnerability

Vulnerable URL: http://sol-r.net/flashdetection.swf?flashContentURL=javascript:alert1 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated...