CVE-2019-8935

Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...

Typesetter Cross-Site Request Forgery Vulnerability

Typesetter is a free CMS Content Management System. A cross-site request forgery vulnerability exists in the User Permissions page aka Admin/Users in Typesetter version 5.1, which stems from the lack of an anti-CSRF token. A remote attacker can exploit this vulnerability by sending a spoofed HTTP...

How To: Configure UPM to save password in Internet Explorer

Users are unable to save passwords in Internet Explorer if their profile is managed by UPM...

MantisBT SQL Injection Vulnerability

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A SQL injection vulnerability exists in the manageuserpage.php script in MantisBT versions 1.2.18 and earlier and...

GOOGLE shopping built Station system injection vulnerability-vulnerability warning-the black bar safety net

Find an injection point http://www.xxx.com /DiaryA. asp? UBID=&DCID=DC2012050610553697&DIID=DI2012050610583389 Habitual plus’having1=1-- http://www.xxx.com.tw/DiaryA.asp?UBID=&DCID=DC2012050610553697&DIID=DI2012050610583389’having 1=1— ! Broke DiaryA. dlTitle（this time very excited.） Then continu...

Pritlog CMS 0.821 Cross Site Scripting

Title: ====== Pritlog v0.821 CMS - Multiple Web Vulnerabilities Date: ===== 2012-04-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=534 VL-ID: ===== 534 Introduction: ============= PRITLOG is an extremely simple, small 500K uncompressed and powerful blog system. It...

CVE-2005-4519

Multiple SQL injection vulnerabilities in the manage user page manageuserpage.php in Mantis 1.0.0rc3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 prefix and 2 sort parameters to the manage user page manageuserpage.php, or 3 the sort parameter to viewallset.php...