13597 matches found
CVE-2014-9760
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
CVE-2014-9760
GOsa contains a cross-site scripting (XSS) vulnerability in the displayLogin function (html/index.php). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the username parameter. The available documents do not specify affected versions, root cause beyond the inpu...
CVE-2016-7565
install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter...
CVE-2014-9760
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
Joomla! Component JE Directory 1.7 - 'ditemid' SQL Injection
Exploit Title: Joomla! Component JE Directory Ads 1.7 - SQL Injection Google Dork: inurl:index.php?option=comjedirectory Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...
CVE-2016-7565: Improper Access Control
install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter...
CVE-2014-9760: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
PT-2017-9225
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters in the sc array parameter of the install/index.php file. Recommendations For Exponent CM...
PT-2017-6395
Name of the Vulnerable Software and Affected Versions GOsa affected versions not specified Description A cross-site scripting XSS issue exists in the displayLogin function in html/index.php, allowing remote attackers to inject arbitrary web script or HTML via the username variable. This could...
EXAMPLO - SQL Injection
EXAMPLO - SQL Injection Exploit Title: Examplo - Online Exam System - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://softpae.sk/ Software Buy: https://codecanyon.net/item/examplo-online-exam-system/16174658 Demo: http://munka.softpae.sk/examplo/ Version: N/A Tested on: Wi...
Examplo Online Exam System SQL Injection
Exploit Title: Examplo - Online Exam System - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://softpae.sk/ Software Buy: https://codecanyon.net/item/examplo-online-exam-system/16174658 Demo: http://munka.softpae.sk/examplo/ Version: N/A Tested on: Win7 x64, Kali Linux x64...
CVE-2017-5368
ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF Cross Site Request Forgery which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a malicious web page, the attacker can silently and...
CVE-2017-5367: Improper Neutralization of Input During Web Page Generation
Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample...
PT-2017-16456
Name of the Vulnerable Software and Affected Versions ZoneMinder versions 1.29 through 1.30 Description Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder, an open-source CCTV server web application. This allows a remote attacker to execute malicious...
PT-2017-16457
Name of the Vulnerable Software and Affected Versions ZoneMinder versions 1.29 through 1.30 Description The issue allows a remote attack to make changes to the web application as the current logged-in victim, enabling the creation of a new admin user within the application for remote persistence...
CVE-2017-5368: Cross-Site Request Forgery (CSRF)
ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF Cross Site Request Forgery which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a malicious web page, the attacker can silently and...
karbenopenair.de XSS vulnerability
Vulnerable URL: http://www.karbenopenair.de/index.php?sub=ticketsprompt/OPENBUGBOUNTY/...
CVE-2016-2242
Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php...
CVE-2016-2242: Improper Control of Generation of Code
Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php...