CVE-2019-7545

In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...

EUVD-2019-17275

Malware in sbrugna...

EUVD-2019-17276

Malware in sbrugna...

EUVD-2019-17085

Malware in sbrugna...

Session fixation

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...

Cross site scripting

includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...

CVE-2019-7747

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...

CVE-2019-7748

includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...

CVE-2019-7748

includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...

CVE-2019-7747

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...

CVE-2019-7747

CVE-2019-7747 affects DbNinja 3.2.7 and enables session fixation through the data.php sessid parameter. The issue’s root cause is the use of a data.php sessid token that can allow an attacker to establish or hijack a user session. Public references indicate the vulnerability exists, with NVD noti...

CVE-2019-7747

DbNinja 3.2.7 allows session fixation via the data.php sessid parameter...

CVE-2019-7748

CVE-2019-7748 affects DbNinja 3.2.7 where the file _includes\online.php can be abused to trigger cross-site scripting through the data.php task parameter when _users/admin/tasks.php exists. This is a reflected/XSS-style issue tied to the handling of the data parameter, as described in the NVD ent...

CVE-2019-7748

includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if users/admin/tasks.php exists...

CVE-2019-7545

In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...

Cross site scripting

In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...

CVE-2019-7545

In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...

CVE-2019-7545

In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting XSS vulnerability in the User Name field...

CVE-2019-7545

CVE-2019-7545 details (consolidated): In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name field, attributable to a stored XSS flaw. The Red Hat/NVD/NIST records and related feeds confirm this CVE across multiple ...

DbNinja 3.2.6 Flash XSS Vulnerabilities

Exploit Title: DbNinja Flash XSS Exploit Google Dork: intitle: Flash XSS Date: May 27, 2015 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.dbninja.com Software Link: www.dbninja.com Version: 3.2.6 Tested on: Windows 7 Category: Flash XSS CVE : NA Source...