CVE-2013-10017 fanzila WebFinance save_roles.php sql injection

A vulnerability was found in fanzila WebFinance 0.5. It has been classified as critical. Affected is an unknown function of the file htdocs/admin/saveroles.php. The manipulation of the argument id leads to sql injection. The name of the patch is 6cfeb2f6b35c1b3a7320add07cd0493e4f752af3. It is...

CVE-2013-10015

creationtimestamp| type| source ---|---|--- 2023-02-03 22:21:00+00:00| seen| https://t.me/cibsecurity/57509...

CVE-2013-10016

creationtimestamp| type| source ---|---|--- 2023-02-03 22:20:57+00:00| seen| https://t.me/cibsecurity/57506...

CVE-2013-10016 fanzila WebFinance save_taxes.php sql injection

A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdocs/admin/savetaxes.php. The manipulation of the argument id leads to sql injection. The patch is named 306f170ca2a8203ae3d8f51fb219ba9e05b945e1. It is...

CVE-2013-10016

The CVE targets fanzila WebFinance 0.5, with a SQL injection in htdocs/admin/save_taxes.php triggered by manipulating the id parameter. The vulnerability is described as critical, affecting processing of unknown data in that file. The identified patch is 306f170ca2a8203ae3d8f51fb219ba9e05b945e1, ...

CVE-2013-10015

CVE-2013-10015 affects fanzila WebFinance 0.5. The vulnerability resides in the file htdocs/admin/save_Contract_Signer_Role.php, where manipulation of the argument n/v leads to SQL injection. A patch is available (commit: abad81af614a9ceef3f29ab22ca6bae517619e06) and should be applied to remediat...

santayana.com.br Cross Site Scripting vulnerability OBB-3174747

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Siemens SCALANCE Privilege Escalation (CVE-2013-3633)

A vulnerability has been identified in SCALANCE X-200 switch family incl. SIPLUS NET variants Versions V5.0.0 for CVE-2013-3633 and versions V4.5.0 for CVE-2013-3634, SCALANCE X-200IRT switch family incl. SIPLUS NET variants All versions V5.1.0. The user privileges for the web interface are only...

hungama.com Cross Site Scripting vulnerability OBB-3164298

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

majesticreaders.com Cross Site Scripting vulnerability OBB-3161103

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2013-10014

CVE-2013-10014 affects oktora24 2moons, where an unknown function enables SQL injection. The vulnerability is described as critical (CVSS 3.1 base score 9.8, network access, no auth/UI interaction) with high impact on confidentiality, integrity, and availability. A patch is identified as 1b09cf76...

CVE-2013-10014 oktora24 2moons sql injection

A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulation leads to sql injection. The patch is identified as 1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7. It is recommended to apply a patch to fix this issue. VDB-218898 is the identifi...

CVE-2013-10013

creationtimestamp| type| source ---|---|--- 2023-01-17 18:23:48+00:00| seen| https://t.me/cibsecurity/56591...

CVE-2013-10013

The CVE concerns the Bricco Authenticator Plugin, specifically the DBAuthenticator.java authenticate/compare path. The vulnerability allows SQL injection due to improper handling in that function. Affected versions are prior to 1.39. Upgrading to version 1.39 addresses the issue (patch a5456633ff...

CVE-2013-10012

The CVE-2013-10012 entry concerns antonbolling clan7ups, specifically the Login/Session component. Affected is an unknown function of the Login/Session functionality where manipulation enables SQL injection. A patch is identified by the commit/patch hash 25afad571c488291033958d845830ba0a1710764 a...

fengshui4today.com Cross Site Scripting vulnerability OBB-3148124

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2013-10011

creationtimestamp| type| source ---|---|--- 2023-01-12 18:30:21+00:00| seen| https://t.me/cibsecurity/56421...

CVE-2013-10011

A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. The attack may be launched remotely. The name of the patch is 096de5815c7b414e7339f3439522a446098fb73a. It ...

CVE-2013-10011 aeharding classroom-engagement-system sql injection

A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. The attack may be launched remotely. The name of the patch is 096de5815c7b414e7339f3439522a446098fb73a. It ...

CVE-2013-10011 aeharding classroom-engagement-system sql injection

A vulnerability was found in aeharding classroom-engagement-system and classified as critical. Affected by this issue is some unknown functionality. The manipulation leads to sql injection. The attack may be launched remotely. The name of the patch is 096de5815c7b414e7339f3439522a446098fb73a. It ...