Sql injection

SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429...

CVE-2018-7314

PrayerCenter 3.0.2 for Joomla! is affected by CVE-2018-7314, a SQL Injection via the sessionid parameter that allows unauthenticated attackers to execute arbitrary SQL against the backend database. The vulnerability is categorized as CWE-89 and is described as a high-severity, remote-exploit, una...

CVE-2017-17529

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

CVE-2017-17529

af/util/xp/utgofile.cpp in AbiWord 3.0.2-2 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

Joomla Price Alert 3.0.2 Component - product_id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Price Alert 3.0.2 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link:...

CVE-2017-9600

The "Peoples Bank Tulsa" by Peoples Bank - OK app 3.0.2 -- aka peoples-bank-tulsa/id1074279285 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Houkokusyo Sakusei Shien Tool installer Arbitrary Code Execution Vulnerability

Houkokusyo Sakusei Shien Tool is a report generation support tool. installer is one of the installation programs. An arbitrary code execution vulnerability exists in the installer version 3.0.2 and versions 2.0 and later of the Houkokusyo Sakusei Shien Tool. An attacker can exploit this...

CVE-2017-2181

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2182...

Hands-on AppGoat Remote Code Execution Vulnerability (CNVD-2017-08572)

AppGoat is a vulnerability experiential learning tool from IPA Japan that can be used to learn about relevant web application vulnerabilities and enable interactive learning. A remote code execution vulnerability exists in Hands-on AppGoat version 3.0.2. An attacker can exploit the vulnerability ...

Hands-on AppGoat Information Disclosure Vulnerability

AppGoat is a vulnerability experiential learning tool from IPA Japan that can be used to learn about relevant web application vulnerabilities and enable interactive learning. An information disclosure vulnerability exists in Hands-on AppGoat 3.0.2 and earlier versions, which could allow an attack...

Hands-on AppGoat Remote Code Execution Vulnerability

AppGoat is a vulnerability experiential learning tool from IPA Japan that can be used to learn about relevant web application vulnerabilities and enable interactive learning. A remote code execution vulnerability exists in Hands-on AppGoat version 3.0.2. An attacker can exploit the vulnerability ...

Myportfolio,3.0.2,SQL Injection

Myportfolio,3.0.2,SQL Injection Developer statement new version number 3.0.3 Update Notice URL https://www.samybaxy.net/...

CVE-2017-1152

IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 122293...

Postfix Admin Security Bypass Vulnerability

Postfix Admin is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Network Community Script 3.0.2 SQL Injection

Exploit Title: Network Community Script v3.0.2 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/network-community/ Demo: http://socialcommunityscript.com/products/businessnetwork/ Version: 3.0.2 Test...

Limny 3.0.2 Local File Inclusion

======================================================================== | Title : limny 3.0.2 Local File Inclusion vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 3.0.2 | Vendor : http://www.limny.org/ | Dork : n/a...

Airmail 3.0.2 - Cross-Site Scripting

Exploit for macOS platform in category web applications Airmail is a popular email client on iOS and OS X. I found a vulnerability in airmail of the latest version which could cause a file:// xss and arbitrary file read. Author: redrain, email protected Date: 2016-08-15 Version: 3.0.2 and earlier...

CVE-2016-4508

Cross-site scripting XSS vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Rexroth Bosch BLADEcontrol Cross-Site Scripting Vulnerability

Rexroth Bosch BLADEcontrol is a Web-based HMI Human Machine Interface system from Rexroth Bosch. A cross-site scripting vulnerability exists in Rexroth Bosch BLADEcontrol 3.0.2 and prior versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

PT-2016-5990 · Bosch Rexroth · Bladecontrol-Webvis

Name of the Vulnerable Software and Affected Versions: Rexroth Bosch BLADEcontrol-WebVIS versions 3.0.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially leading to...