Lucene search
+L

191 matches found

Prion
Prion
added 2022/06/02 2:15 p.m.18 views

Sql injection

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profileaction - updateuser. This allows a remote attacker to compromise Application SQL database...

7.5CVSS9.6AI score0.0122EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.8 views

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL注入漏洞

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...

9.8CVSS5.9AI score0.0122EPSS
Exploits1References3
CVE
CVE
added 2022/05/31 11:38 p.m.57 views

CVE-2021-44096

The CVE-2021-44096 entry concerns EGavilan Media User-Registration-and-Login-System-With-Admin-Panel version 1.0. It is vulnerable to SQL Injection via the profile_action - update_user endpoint, allowing a remote attacker to compromise the application’s SQL database. The connected documents consi...

9.8CVSS9.7AI score0.0122EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/10/07 3:10 p.m.30 views

CVE-2021-3833 Integria IMS incorrect authorization

Integria IMS login check uses a loose comparator "==" to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords...

9.8CVSS9.5AI score0.01083EPSS
Exploits0References2
CNVD
CNVD
added 2021/05/22 12:0 a.m.2 views

Weak Password Vulnerability in Wheaton eDigital Socks5 VPN Login System

Shenzhen Wheaton Information Technology Co., Ltd Wheaton for short is a company dedicated to providing government, enterprises and institutions with remote application centralized access solutions, VPN security interconnection solutions, core data security protection solutions and so on. Weak...

7.2AI score
Exploits0
NVD
NVD
added 2021/01/26 6:15 p.m.17 views

CVE-2020-35263

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution...

9.8CVSS9.9AI score0.02461EPSS
Exploits1References1
Prion
Prion
added 2021/01/26 6:15 p.m.14 views

Sql injection

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution...

7.5CVSS9.9AI score0.02461EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/01/26 5:20 p.m.23 views

CVE-2020-35263

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution...

9.9AI score0.02461EPSS
Exploits1References1
CVE
CVE
added 2021/01/26 5:20 p.m.37 views

CVE-2020-35263

CVE-2020-35263 affects EgavilanMedia User Registration & Login System 1.0. The vulnerability is a SQL injection in the admin panel that may lead to arbitrary code execution. Documents confirm the affected product and the underlying cause (SQL injection) with potential impact on confidentiality, i...

9.8CVSS9.8AI score0.02461EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/01/26 12:0 a.m.10 views

Egavilanmedia User Registration & Login System SQL注入漏洞

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EgavilanMedia User Registration & Login System 1.0, which can be exploited by an attacker to execute SQL statements due to the...

9.8CVSS7.4AI score0.02461EPSS
Exploits1References2
CNVD
CNVD
added 2021/01/04 12:0 a.m.5 views

Egavilanmedia User Registration & Login System Cross-Site Scripting Vulnerability (CNVD-2021-01537)

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site scripting vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel 1.0, which originates on the admin profile page. The...

5.4CVSS5.8AI score0.00586EPSS
Exploits2References1
CNVD
CNVD
added 2021/01/03 12:0 a.m.6 views

Egavilanmedia User Registration & Login System SQL Injection Vulnerability

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A SQL injection vulnerability exists in EGavilanMedia User Registration and Login System With Admin Panel version 1.0, which stems from a lack of validation of external...

7.5CVSS8AI score0.01122EPSS
Exploits2References1
OSV
OSV
added 2020/12/30 7:15 p.m.3 views

CVE-2020-29230

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...

6.1CVSS6.3AI score0.0079EPSS
Exploits2References2
NVD
NVD
added 2020/12/30 7:15 p.m.24 views

CVE-2020-29228

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page...

7.5CVSS8AI score0.01122EPSS
Exploits2References1
NVD
NVD
added 2020/12/30 7:15 p.m.17 views

CVE-2020-29231

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the...

5.4CVSS5.2AI score0.00586EPSS
Exploits2References1
Prion
Prion
added 2020/12/30 7:15 p.m.15 views

Cross site scripting

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the...

3.5CVSS5.2AI score0.00586EPSS
Exploits2References2Affected Software1
Prion
Prion
added 2020/12/30 7:15 p.m.11 views

Cross site scripting

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...

4.3CVSS5.8AI score0.0079EPSS
Exploits2References2Affected Software1
CVE
CVE
added 2020/12/30 6:21 p.m.53 views

CVE-2020-29231

CVE-2020-29231 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is a cross-site scripting (XSS) flaw on the Admin Profile Page, where an attacker can inject an XSS payload into the administrator’s full name, triggering when the admin visits the prof...

5.4CVSS5.1AI score0.00586EPSS
Exploits2References1Affected Software1
CVE
CVE
added 2020/12/30 6:18 p.m.47 views

CVE-2020-29230

CVE-2020-29230 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0. The vulnerability is an cross-site scripting (XSS) flaw in the Admin Panel – Manage User tab, exploited via the Full Name field in user registration. The described impact is that an attacker can inject a...

6.1CVSS5.8AI score0.0079EPSS
Exploits2References1Affected Software1
Cvelist
Cvelist
added 2020/12/30 6:18 p.m.19 views

CVE-2020-29230

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting XSS in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each tim...

5.9AI score0.0079EPSS
Exploits2References1
Rows per page
Query Builder