ncat.edu XSS vulnerability

Open Bug Bounty ID: OBB-179489 Description| Value ---|--- Affected Website:| ncat.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mopa.gov.bd XSS vulnerability

Vulnerable URL: http://www.mopa.gov.bd/libemail/mail.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100112 Google Pagerank| ...

PHPPost 1.0 mail.php user Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/15524/info PHP-Post is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code ...

MySource 2.14 Mail.php PEAR_PATH Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these...

boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability

No description provided by source. ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hacke...

Maian Weblog 2.0 mail.php Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQ...

MKPortal Contact module XSS Vulnerability

========================================= MKPortal Contact module XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / // /' / /' 0 0 / / / / / / 1 1 / / 0 0 ////// // // //...

CVE-2008-6965: Improper Authentication

AJ Square AJ Auction OOPD, Pro Platinum Skin 1, Pro Platinum Skin 2, and Web 2.0 send a redirect but do not exit when certain scripts are called directly, which allows remote attackers to bypass authentication via a direct request to 1 site.php, 2 auction.php, 3 mail.php, 4 feesetting.php, 5...

Sql injection

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...

CVE-2009-1814

CVE-2009-1814 describes an SQL injection in mail.php of PHPenpals (v1.1 and earlier) allowing remote SQL command execution via the ID parameter. Consequences and patch details are not provided here beyond noting that the profile.php vector is covered by CVE-2006-0074; the connected records indica...

CVE-2009-1814

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...

CVE-2009-1814: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mail.php in PHPenpals 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the profile.php vector is already covered by CVE-2006-0074...

CVE-2009-0340

CVE-2009-0340 affects Simple PHP Newsletter 1.5. Multiple directory traversal vulnerabilities allow remote attackers to read arbitrary files via a ".." in the olang parameter to (1) mail.php and (2) mailbar.php. Root cause: improper validation of the olang parameter enables path traversal. Impact...

CVE-2009-0340: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Simple PHP Newsletter 1.5 allow remote attackers to read arbitrary files via a .. dot dot in the olang parameter to 1 mail.php and 2 mailbar.php...

Simple PHP Newsletter 1.5 Local File Inclusion

--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...

Simple PHP Newsletter 1.5 (olang) Local File Inclusion Vulnerabilities

No description provided by source. --:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ----------------------------------------------...

Simple PHP NewsLetter 1.5 - Local File Inclusion

--:local file include:-- --------------------------------- script:Simple PHP Newsletter 1.5 ---------------------------------------------- download from:http://quirm.net/download/23/ ---------------------------------------------- ............................................... vul:/mail.php line...

Sql injection

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 aka Uploader PRO, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a img.php, b file.php, c mail.php, d thumb.php, e zip.php, and f zipit.php, and 2 the view parameter t...

CVE-2008-5075: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in E-Uploader Pro 1.0 aka Uploader PRO, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a img.php, b file.php, c mail.php, d thumb.php, e zip.php, and f zipit.php, and 2 the view parameter t...

Sql injection

SQL injection vulnerability in members/mail.php in E-topbiz Online Dating 3 1.0 allows remote authenticated users to execute arbitrary SQL commands via the mailid parameter in a veiw action...