CVE-2016-3109

The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code...

Bear sea CMS v1. 0 backend login bypass vulnerability

No description provided by source...

SQL Injection Vulnerability in Cache Master Web Appliance

Cache Master is able to optimize caching for web videos including mobile videos, as well as smart caching for http downloads of web pages and web images. A SQL injection vulnerability exists in the Cache Master web appliance. An attacker can use this vulnerability to log into the backend of a...

bluecms v1. 6 Sql Injection analysis-vulnerability warning-the black bar safety net

Long time no code audit, take a simple look feel. bluecms is a comparison of the old portal cms, online also has a lot about its vulnerability has not been patched, so the following vulnerability is also not really up to date, just when practicing hand. SQL injectionanalysis First look at the dat...

Weak Password Vulnerability in NetSense Information Security Audit System

NetShen Security Audit System is a hardened computer that can defend against attacks with strong security protection. A weak password vulnerability exists in the NetShen Information Security Audit System, which allows an attacker to exploit the vulnerability to log in to the system's backend and...

Null Password Vulnerability in Nport 5110 Devices of Mosaic Technology (Shanghai) Co.

The MOXA Nport 5110 is a serial communication server. A null password vulnerability exists in the MOXA Nport 5110 device, which allows an attacker to exploit the vulnerability to log in to the system backend, gain administrator privileges, and obtain sensitive information about the device...

FortiGate Firewall Has Design Flaw Vulnerability

FortiGate Fita Firewall is a network firewall product from Fortinet Fita for defense against attacks such as network and malicious code at the network and content layers. FortiGate Firewall has a design flaw vulnerability. It allows attackers to obtain sensitive information, log in to the system...

XYCMS健身会所建站系统 v1.1 jsxm_detail.asp 参数id SQL注入漏洞

0x01漏洞简介 XYCMS健身会所建站系统采用asp+access架构。其v1.1版本在/jsxmdetail.asp处对参数id 过滤不严，导致出现SQL注入漏洞。 0x02漏洞详情 该系统默认存在一个管理员数据表adminuser，该表包含管理员名称字段admin和密码 md5加密字段password，远程攻击者可以结合union方式获取敏感信息，登陆后台，上传shell。 0x03修复方案 过滤。...

Generic SQL Injection Vulnerability in CNGENETCMS v4.2.0

CNGENETCMS is a content management system CMS, there is an authentication bypass vulnerability CNGENETCMS v4.2.0 sp1. This vulnerability can be exploited to directly log in to the background of the site without authentication to manage the site. At present, many sites are still using this CMS...

Weak Password Vulnerability in Hangzhou Pinming Tower Crane Online Safety Management System

Hangzhou Pinming Technology Co., Ltd. is a provider of information technology for the focal point of engineering and construction. Tower Crane Online Safety Management System is the company's safety management system. A weak password vulnerability exists in Hangzhou Pinming's tower crane online...

SQL Injection Vulnerability in Bayesian Public Opinion Monitoring System

The Public Opinion Monitoring System is a product of Bayesian Beijing Information Consulting Co., Ltd. which is a market and Internet information research organization. A SQL injection vulnerability exists in the Bayesian Public Opinion Monitoring System. The vulnerability allows attackers to...

Brute Force Protection Bypass in backend login

It has been discovered, that the backend login brute force protection can be bypassed Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Backend Vulnerability Type: Brute Force Protection Bypass Affected Versions: Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0 Severity: Low...

Privilege Bypass Vulnerability in Modern Distance Education Information Management System of Party Members and Cadres of Zhengzhou Wecom Technology Co.

WKM Technology is is a broadband network multimedia application system solutions and equipment providers, system integrators and information service providers, is the Beidou timing application system solutions and equipment providers, the main business of education informatization, party members ...

EasyTalk SQL注入导致后台登录绕过

简要描述： EasyTalk SQL注入导致后台登录绕过 详细说明： 漏洞存在文件：/Admin/Lib/Action/LoginAction.class.php： public function dologin parent::toadmin; $username=$POST'username'; $password=$POST'password'; $authcode=trim$POST'authcode'; if !$username || !$password || !$authcode || $authcode!=$SESSION'authcode'...

typo3 -- Multiple vulnerabilities in TYPO3 Core

Typo Security Team reports: TYPO3 Backend History Module - Due to missing encoding of user input, the history module is susceptible to SQL Injection and Cross-Site Scripting. A valid backend login is required to exploit this vulnerability. Credits go to Thomas Worm who discovered and reported the...

Thousand Bo enterprise website management system v2010 Build 0 7 1 6 vulnerability analysis-vulnerability warning-the black bar safety net

Release time: 2010-07-16 Affected version: Thousand Bo enterprise website management system v2010 Build 0 7 1 6 Vulnerability Description: The search type injection vulnerability Default background address: http://127.1/system/AdminLogin.Asp Publishing author: m4r10 reproduced please indicate the...

Popular with the left back door method of analysis-vulnerability warning-the black bar safety net

First: In the administrator backend login screen to hide our Backdoor, it is relatively safe Because the administrator of the inlet is not often traded, as long as his login screen on our back door just in! Of course, you also can be flexibly inserted into the other file, as long as this file is...

w3bcms <= v3.5.0 Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category web applications ======================================================== w3bcms = v3.5.0 Multiple Remote Vulnerabilities Exploit ======================================================== !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST;...

CVE-2008-5087

SQL injection vulnerability in TYPO3 Another Backend Login wrganotherbelogin extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in TYPO3 Another Backend Login wrganotherbelogin extension before 0.0.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...