1736 matches found
CVE-2016-1199
The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to hijack the authentication of administrators...
CVE-2016-1201
Vulnerability summary: CVE-2016-1201 is a cross-site request forgery (CSRF) bug in EC-CUBE.6,7 The connected sources confirm affected product EC-CUBE (LOCKON) versions 3.0.0 through 3.0.9, where an attacker can cause an administrator’s session to perform unintended actions when visiting a malicio...
CVE-2016-1201
Cross-site request forgery CSRF vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to hijack the authentication of administrators...
JVN#47473944: EC-CUBE fails to restrict access permissions
EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE fails to restrict access permissions. Impact A remote attacker may bypass IP address restrictions and access the login page to the management screen. Solution Apply the update or the patch Apply the upda...
Dimofinf CMS 3.0.0 Cross Site Scripting
Exploit Title : Dimofinf CMS 3.0.0 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.dimofinf.net/index.php Google Dork : "Powered by Dimofinf cms Version 3.0.0" Date: 2016/02/17 Version = 3.0.0 PoC: Username: MobhaM" onmouseover=alert"MobhaM" bad=" Password : 0...
CVE-2016-0231
IBM CVE-2016-0231 affects IBM FTM for ACH Services, Check Services and CPS (3.0.0) prior to FP12, where an authenticated user could obtain sensitive information by reading exception details in error logs. The issue is documented across IBM advisories for FTM components and is also reflected in CN...
GRR 3.0.0-RC1 Remote Code Execution / File Upload
Exploit Title: GRR | @kmkzsecurity Vendor Homepage: http://grr.devome.com/fr/ Software Link: http://grr.devome.com/fr/telechargement/category/3-versions-patch?download=7:grr-3-0-0-rc1 Version: 3.0.0-RC1 Tested on: Windows 2003 R2, PHP 5.2.6 Dork: inurl:/grr/ intext:réservation intitle:"GRR" CVE I...
Joomla Core SQLi Vulnerability (Jan 2016)
Joomla is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...
Joomla! SQL Injection Vulnerability (CNVD-2016-00288)
Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in Joomla! versions 3.0.0 through 3.4.6, which allows attackers to execute arbitrary SQL commands via unspecified vectors...
Exam Board 3.0.0 Blind SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...
Dimofinf 3.0.0 SQL Injection Vulnerability
Dimofinf version 3.0.0 cookie SQL injection exploit. Dimofinf CMS Automatic Cookie SQL Injection exploit Google Dork: intext:"Powered by Dimofinf" Date: 19/11/2015 Author: D35m0nd142 Software link: http://www.dimofinf.net Version: 3.0.0 Tested on: Dimofinf version 3.0.0 Sometimes it happens that...
Polycom BTOE Connector 2.3.0 Local Privilege Escalation
Title: Polycom BToE Connector up to version 2.3.0 allows unprivileged windows users to execute arbitrary code with SYSTEM privileges. Type of vulnerability: Privilege Escalation Exploitation vector: local Attack outcome: Code execution with SYSTEM privileges. Impact: CVSS Base Score 6,2 CVSS v2...
CORS Token Disclosure
Overview When CORS is enabled on a hapi route handler, it is possible to set a crumb token for a different domain. An attacker would need to have an application consumer visit a site they control, request a route supporting CORS, and then retrieve the token. With this token, they could possibly...
baserCMS vulnerable to SQL injection
Overview baserCMS contains an SQL injection vulnerability. baserCMS is an open-source Contents Management System CMS. baserCMS contains a vulnerability that allows an authenticated user to inject arbitrary SQL statements CWE-89. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated...
baserCMS fails to restrict access permissions
Overview baserCMS is an open-source Contents Management System CMS. baserCMS contains a vulnerability where user settings may be changed when processing specially crafted request sent by an attacker logged into the system. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with...
CVE-2013-4486
Zanata 3.0.0 through 3.1.2 has RCE due to EL interpolation in logging...
GPON G-93RG1 Cross Site Request Forgery / Code Execution
CSRF Demo Exploit -- document.auto.submit;...
