27 matches found
CVE-2019-7545
In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...
EUVD-2019-17085
Malware in sbrugna...
EUVD-2019-17275
Malware in sbrugna...
EUVD-2019-17276
Malware in sbrugna...
CVE-2019-7747
DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...
CVE-2019-7748
includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...
Session fixation
DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...
Cross site scripting
includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...
CVE-2019-7748
includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...
CVE-2019-7747
DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...
CVE-2019-7747
DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...
CVE-2019-7747
CVE-2019-7747 affects DbNinja 3.2.7 and enables session fixation through the data.php sessid parameter. The issue’s root cause is the use of a data.php sessid token that can allow an attacker to establish or hijack a user session. Public references indicate the vulnerability exists, with NVD noti...
CVE-2019-7748
CVE-2019-7748 affects DbNinja 3.2.7 where the file _includes\online.php can be abused to trigger cross-site scripting through the data.php task parameter when _users/admin/tasks.php exists. This is a reflected/XSS-style issue tied to the handling of the data parameter, as described in the NVD ent...
CVE-2019-7748
includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...
CVE-2019-7747: Session Fixation
DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...
PT-2019-18741
Name of the Vulnerable Software and Affected Versions DbNinja version 3.2.7 Description The issue allows session fixation via the sessid parameter in the "data.php" endpoint. Recommendations For DbNinja version 3.2.7, avoid using the sessid parameter in the "data.php" endpoint until the issue is...
PT-2019-18742
Name of the Vulnerable Software and Affected Versions DbNinja version 3.2.7 Description The issue allows for XSS via the data.php task parameter in the includesonline.php file, but only if the users/admin/tasks.php file exists. Recommendations For DbNinja version 3.2.7, consider restricting acces...
CVE-2019-7748: Improper Neutralization of Input During Web Page Generation
includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...