42 matches found
WordPress plugin Banner System 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...
PT-2024-34943 · Unknown · Saul Morales Pacheco Banner System
Name of the Vulnerable Software and Affected Versions: Saul Morales Pacheco Banner System versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious...
WordPress Banner System plugin <= 1.0.0 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Banner System versions = 1.0.0...
WordPress Banner System Plugin <= 1.0.0 is vulnerable to Privilege Escalation
Software Banner System Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-52437 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 9145175e73a6 Credits João Pedro S Alcântara Kinorth...
WordPress Banner System plugin <= 1.0.0 - Stored Cross Site Scripting (XSS) vulnerability
Stored Cross Site Scripting XSS vulnerability discovered by ghsinfosec Patchstack Alliance in WordPress Plugin Banner System versions = 1.0.0...
WordPress Banner System Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
Software Banner System Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51816 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID ea8cc644eeb0 Credits ghsinfosec Required privilege Contributor...
JiRo's Banner System 2.0 Login.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
CMS SiteLogic Cross Site Scripting / Shell Upload
Hello Full-Disclosure! I want to warn you about new security vulnerabilities in CMS SiteLogic. It's Ukrainian commercial CMS. In addition to previously reported vulnerabilities, I will report about vulnerabilities in this CMS, which I disclosed in 2009 it's second advisory with vulnerabilities...
CVE-2009-4218
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience JBSX allow remote attackers to execute arbitrary SQL commands via the 1 admin or 2 password field, a related issue to CVE-2007-6091. NOTE: the provenance of this information is unknown; the details are...
CVE-2009-4218
CVE-2009-4218 documents multiple SQL injection flaws in JiRo's Banner System eXperience (JBSX) files/login.asp, enabling remote attackers to inject commands via the admin or password field. This is related to CVE-2007-6091 and involves JiRo's Banner System (JBS) 2.0 (and potentially JiRo's Upload...
CVE-2009-4218
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System eXperience JBSX allow remote attackers to execute arbitrary SQL commands via the 1 admin or 2 password field, a related issue to CVE-2007-6091. NOTE: the provenance of this information is unknown; the details are...
Sungard Banner System XSS
| | ||| ||| | | | | | || || By: gamr | | | | | | ||| ||| Header Product - Banner Student System by SunGard Specific Page - http://www.EXAMPLE.com/PATH/twbkwbis.PSecurityQuestion Change Security Question Version - 7.4 / earlier versions could be effected also Product URL -...
CVE-2007-6091
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...
Sql injection
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...
CVE-2007-6091
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...
CVE-2007-6091
CVE-2007-6091 relates to multiple SQL injection vulnerabilities in JiRo’s Banner System (JBS) 2.0, and possibly JiRo’s Upload Manager (JUS). The flaws reside in the login routine (files/login.asp), where the attacker can inject via the (1) Username (Login/Email) or (2) Password fields to execute ...
JiRos Banner System 2.0 - login.asp Multiple SQL Injections
JiRos Banner System 2.0 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these...
JiRo's Banner System 2.0 - 'login.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/26479/info JiRo's Banner System is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...
CVE-2006-1213
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account...
Authentication flaw
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account...