Lucene search
+L

216 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/31 12:00 a.m.•4 views

CVE-2021-44096: Improper Neutralization of Special Elements used in an SQL Command

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...

9.8CVSS8.3AI score0.01283EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/10/07 3:10 p.m.•44 views

CVE-2021-3833 Integria IMS incorrect authorization

Integria IMS login check uses a loose comparator "==" to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords...

9.8CVSS9.5AI score0.01119EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/05/22 12:00 a.m.•3 views

Weak Password Vulnerability in Wheaton eDigital Socks5 VPN Login System

Shenzhen Wheaton Information Technology Co., Ltd Wheaton for short is a company dedicated to providing government, enterprises and institutions with remote application centralized access solutions, VPN security interconnection solutions, core data security protection solutions and so on. Weak...

7.2AI score
SaveExploits0
NVD
NVD
•added 2021/01/26 6:15 p.m.•23 views

CVE-2020-35263

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution...

9.8CVSS9.9AI score0.02461EPSS
SaveExploits1References1
Prion
Prion
•added 2021/01/26 6:15 p.m.•20 views

Sql injection

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution...

7.5CVSS9.9AI score0.02461EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/01/26 5:20 p.m.•34 views

CVE-2020-35263

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution...

9.9AI score0.02461EPSS
SaveExploits1References1
CVE
CVE
•added 2021/01/26 5:20 p.m.•48 views

CVE-2020-35263

CVE-2020-35263 affects EgavilanMedia User Registration & Login System 1.0. The vulnerability is a SQL injection in the admin panel that may lead to arbitrary code execution. Documents confirm the affected product and the underlying cause (SQL injection) with potential impact on confidentiality, i...

9.8CVSS9.8AI score0.02461EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/26 12:00 a.m.•3 views

CVE-2020-35263: Improper Neutralization of Special Elements used in an SQL Command

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution...

9.8CVSS6.3AI score0.02461EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•20 views

Egavilanmedia User Registration & Login System SQL注入漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EgavilanMedia User Registration & Login System 1.0, which can be exploited by an attacker to execute SQL statements due to the...

9.8CVSS7.4AI score0.02461EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/01/04 12:00 a.m.•11 views

Egavilanmedia User Registration & Login System Cross-Site Scripting Vulnerability (CNVD-2021-01537)

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0, which originates on the admin profile page. The...

5.4CVSS5.8AI score0.00598EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/01/03 12:00 a.m.•19 views

Egavilanmedia User Registration & Login System SQL Injection Vulnerability

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which stems from a lack of validation of external...

7.5CVSS8AI score0.01146EPSS
SaveExploits2References1
OSV
OSV
•added 2020/12/30 7:15 p.m.•10 views

CVE-2020-29230

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...

6.1CVSS6.3AI score0.00807EPSS
SaveExploits2References2
NVD
NVD
•added 2020/12/30 7:15 p.m.•23 views

CVE-2020-29231

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the...

5.4CVSS5.2AI score0.00598EPSS
SaveExploits2References1
NVD
NVD
•added 2020/12/30 7:15 p.m.•31 views

CVE-2020-29228

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page...

7.5CVSS8AI score0.01146EPSS
SaveExploits2References1
Prion
Prion
•added 2020/12/30 7:15 p.m.•18 views

Cross site scripting

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...

4.3CVSS5.8AI score0.00807EPSS
SaveExploits2References2Affected Software1
Prion
Prion
•added 2020/12/30 7:15 p.m.•22 views

Cross site scripting

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the...

3.5CVSS5.2AI score0.00598EPSS
SaveExploits2References2Affected Software1
CVE
CVE
•added 2020/12/30 6:21 p.m.•66 views

CVE-2020-29231

CVE-2020-29231 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is a cross-site scripting (XSS) flaw on the Admin Profile Page, where an attacker can inject an XSS payload into the administrator’s full name, triggering when the admin visits the prof...

5.4CVSS5.1AI score0.00598EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2020/12/30 6:18 p.m.•60 views

CVE-2020-29230

CVE-2020-29230 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is an cross-site scripting (XSS) flaw in the Admin Panel – Manage User tab, exploited via the Full Name field in user registration. The described impact is that an attacker can inject a...

6.1CVSS5.8AI score0.00807EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2020/12/30 6:18 p.m.•33 views

CVE-2020-29230

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...

5.9AI score0.00807EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2020/12/30 6:13 p.m.•38 views

CVE-2020-29228

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page...

8AI score0.01146EPSS
SaveExploits2References1
Rows per page
Query Builder