CVE-2019-19245: Improper Neutralization of Special Elements used in an SQL Command

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...

PT-2018-14993

Name of the Vulnerable Software and Affected Versions EduSec versions through 4.2.6 Description The issue allows remote attackers to potentially obtain access via a brute-force approach due to the lack of restriction on sending a series of LoginFormusername and LoginFormpassword parameters to the...

CVE-2015-1512: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginFormusername to ui/system/login or the 2 order or 3 myorgs to index.php...

PT-2015-5335

Name of the Vulnerable Software and Affected Versions FancyFon FAMOC versions prior to 3.17.4 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the LoginFormusername to...