PT-2014-2400

Name of the Vulnerable Software and Affected Versions Vessio NetBill version 1.2 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action. This occurs in the...

CVE-2012-6631: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in accounts/admin/index.php in Vessio NetBill 1.2 allows remote attackers to hijack the authentication of administrators for requests that add accounts via a new-client action...

CVE-2014-1206

SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...

PT-2014-4012

Name of the Vulnerable Software and Affected Versions Open Web Analytics OWA versions prior to 1.5.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the owa email address parameter in a base.passwordResetRequest action to "index.php"...

Discuz! x3.1 index.php 代码执行漏洞

No description provided by source...

Discuz! x3.1 /utility/convert/index.php 代码执行漏洞

No description provided by source...

CVE-2013-7002: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the glanguage parameter...

PT-2013-6227

Name of the Vulnerable Software and Affected Versions LiveZilla versions prior to 5.1.1.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the g language parameter in the mobile/php/translation/index.php file. Recommendations For...

AppCMS 1.3.890 /index.php SQL注入漏洞

No description provided by source...

Lowest Unique Bid Auction - SQL Injection

Lowest Unique Bid Auction - SQL Injection | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Lowest unique bid auction, SQLi Vulnerabilities Product Page:...

PT-2013-5366

Name of the Vulnerable Software and Affected Versions RockMongo versions 1.1.5 and earlier Description The issue allows remote attackers to read arbitrary files by exploiting a directory traversal vulnerability. This can be achieved by including a .. dot dot in the ROCK LANG cookie, as seen in a...

pdirl PHP Directory Listing 1.0.4 - Cross Site Scripting Web Vulnerabilities

Document Title: =============== pdirl PHP Directory Listing 1.0.4 - Cross Site Scripting Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1130 Release Date: ============= 2013-11-01 Vulnerability Laboratory ID VL-ID:...

[SOJOBO-ADV-13-04] - PHP-Nuke 8.2.4 multiple vulnerabilities

SOJOBO-ADV-13-04 - PHP-Nuke 8.2.4 multiple vulnerabilities I. Information ================== Name : PHP-Nuke 8.2.4 multiple vulnerabilities Software : PHP-Nuke 8.2.4 and possibly below. Vendor Homepage : http://www.phpnuke.org/ Vulnerability Type : File Inclusion and Reflected Cross-Site Scriptin...

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities

Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...

CVE-2013-5108

Multiple cross-site scripting XSS vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 db parameter on the login page or 2 username parameter in a login.index action to index.php and other unspecified parameters...

CVE-2013-6341

SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php...

CVE-2013-6341

SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php...

CVE-2013-6341

CVE-2013-6341 : Dokeos up to 2.2 RC2 has a SQL injection via the GET parameter “language” sent to /index.php. Root cause: insufficient validation of the language parameter. Impact: remote attacker can execute arbitrary SQL commands against the application database (high risk). Affected: Dokeos 2....

PT-2013-5367

Name of the Vulnerable Software and Affected Versions RockMongo versions 1.1.5 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the db parameter on the login page or the username parameter in a login.index action to "index.php" and other...

PT-2013-6003

Name of the Vulnerable Software and Affected Versions Dokeos versions 2.2 RC2 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the language parameter to the "index.php" endpoint. Recommendations For Dokeos...