sqlinjection bug in nova cms

Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability Date: 2/12/2012 Author: Dr.web Software Link: http://sourceforge.net/projects/xraycms/files/latest/download Version: 1.1.1 Tested on: Ubuntu XRay CMS is vulnerable to a SQL Injection attack which allows authentication bypass into the admins...

CVE-2012-1026

Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

CVE-2012-1026: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login2.php in XRay CMS 1.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

XRayCMS 1.1.1 - SQL Injection

XRayCMS 1.1.1 - SQL Injection Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability Date: 2/5/2012 Author: chap0 Software Link: http://sourceforge.net/projects/xraycms/files/latest/download Version: 1.1.1 Tested on: Ubuntu XRay CMS is vulnerable to a SQL Injection attack which allows...

XRayCMS 1.1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability Date: 2/5/2012 Author: chap0 Software Link: http://sourceforge.net/projects/xraycms/files/latest/download Version: 1.1.1 Tested on: Ubuntu XRay CMS is vulnerable to a SQL Injection attac...

Netautor Professional 'login2.php' XSS Vulnerability

Netautor Professional is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-3489: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in netautor/napro4/home/login2.php in CMS Digital Workroom formerly Netautor Professional 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the goback parameter...

Netautor Professional 5.5.0 Cross Site Scripting

Netautor Professional 5.5.0 goback XSS Vulnerability Vendor: /digiconcept/ Product web page: http://www.digiconcept.net Affected version: 5.5.0 and DW 5.3.1 Summary: Netautor Professional is an application server and development environment. Netautor Professional was developed to serve the...

CVE-2008-6763

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the loggedin cookie to that account's username...

CVE-2008-6763: Improper Authentication

login2.php in Silentum LoginSys 1.0.0 allows remote attackers to bypass authentication and obtain access to an arbitrary account by setting the loggedin cookie to that account's username...

Silentum LoginSys 1.0.0 Insecure Cookie Handling vulnerability

Exploit for unknown platform in category web applications ============================================================== Silentum LoginSys 1.0.0 Insecure Cookie Handling vulnerability ============================================================== START 0x01 Informations: Script : Silentum LoginSy...