CVE-2018-6861

Cross Site Scripting XSS exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter...

CVE-2018-6861

The CVE-2018-6861 entry describes a Cross Site Scripting (XSS) vulnerability in PHP Scripts Mall Lawyer Search Script 1.0.2, exploitable via a profile update parameter. Multiple sources (NVD, CNVD, CVE listings) corroborate that user-supplied input in profile fields is not properly sanitized, all...

Lawyer Search Script 1.0.2 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Lawyer Search Script - 1.0.2 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/lawyer-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web:...

Lawyer Search Script 1.0.2 - Cross-Site Scripting

Lawyer Search Script 1.0.2 - Cross-Site Scripting. CVE-2018-6861. Webapps exploit for PHP platform Exploit Title: Lawyer Search Script - 1.0.2 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/lawyer-script/...

CVE-2015-6861

CVE-2015-6861 affects HPE Helion Eucalyptus (versions 3.4.0–4.2.0). The issue allows remote authenticated users to bypass the intended AssumeRole permission and assume an IAM role by abusing a policy setting on a user’s account. Impact is described as bypassing IAM permission controls with potent...

CVE-2014-6861

The CVE-2014-6861 entry concerns the Terrarienbilder.com Forum Android app (version 3.8.20) which does not verify X.509 certificates from SSL servers. This enables MITM attackers to spoof servers and retrieve sensitive information via crafted certificates. The connected records confirm the affect...

CVE-2008-6861

The CVE-2008-6861 issue affects Xigla Software Absolute Newsletter (version 6.0 and 6.1). The vulnerability allows remote attackers to bypass authentication and gain administrative access by setting a specific cookie value, enabling partial confidentiality/integrity/availability impact as per the...

CVE-2006-6861

CVE-2006-6861: Outfront Spooky Login 2.7 contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL via (1) UserUpdate in login/register.asp or (2) unspecified parameters in includes/a_register.asp. No remediation details are provided in the connected documents.