CVE-2016-10329

Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header...

CVE-2016-10329

Affected product: Synology Photo Station (prior to version 6.5.3-3226). Vulnerability: Command injection in login.php that allows remote attackers to execute arbitrary code through shell metacharacters in a crafted X-Forwarded-For header. Impact: Remote code execution with high risk (as noted by ...

Cross site scripting

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...

CVE-2017-5631

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...

CVE-2016-10322

Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php...

ciao.de XSS vulnerability

Vulnerable URL: https://www.ciao.de/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 34306 VIP website status:| Yes Check ciao.de SSL connection:| Grade: A Coordinated...

yelites.org XSS vulnerability

Vulnerable URL: http://www.yelites.org/web/login.php?err=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3059223 VIP website status:| No Check yelites.org SSL connection:| Grade: ...

hckrs.ir XSS vulnerability

Vulnerable URL: http://hckrs.ir/login.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3771032 VIP website status:| No Check hckrs.ir SSL connection:| Grade: F Coordinated...

jaipurad.com XSS vulnerability

Vulnerable URL: http://www.jaipurad.com/login.php?msg=%22%22/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E=internal.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

dailypioneer.com XSS vulnerability

Vulnerable URL: http://www.dailypioneer.com/cms/login.php?msg=OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 52961 VIP website status:| No Check dailypioneer.com SSL...

pilotschedule.com XSS vulnerability

Vulnerable URL: http://www.pilotschedule.com/login.php?msg=...

edu.mapf.ir XSS vulnerability

Vulnerable URL: http://edu.mapf.ir/login.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check edu.mapf.ir SSL connection:| Grade: F Coordinated...

roshdportal.beenj.com XSS vulnerability

Vulnerable URL: http://roshdportal.beenj.com/login.php?redirect=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

gooyeshz.ir XSS vulnerability

Vulnerable URL: http://gooyeshz.ir/grades/login.php?redirect=" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3056720 VIP website status:| No Check gooyeshz.ir SSL connection:| Grade: F Coordinated Disclosure...

reg.mtamini.ir XSS vulnerability

Vulnerable URL: http://reg.mtamini.ir/login.php?redirect=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check reg.mtamini.ir SSL...

publicdomainvectors.org XSS vulnerability

Vulnerable URL: http://publicdomainvectors.org/photocms/login.php?language=...

mail-viclarity.com XSS vulnerability

Vulnerable URL: https://mail-viclarity.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

fr.pure360.com XSS vulnerability

Vulnerable URL: https://fr.pure360.com/login.php?message=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 09:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress WP-Password 插件-login.php文件err参数-跨站脚本漏洞

No description provided by source...

Dell SonicWALL Scrutinizer 11.0.1 - setUserSkin/deleteTab SQL Injection Remote Code Execution

Exploit for windows platform in category remote exploits !/usr/local/bin/python """ Dell SonicWall Scrutinizer Summary: ======== This exploits an pre-auth SQL Injection in the login.php script within an update statement to steal session data. You could also steal login creds which require...