SQL injection vulnerability in p**w.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

PT-2019-12263

Name of the Vulnerable Software and Affected Versions Carel pCOWeb versions prior to B1.2.4 Description A Stored XSS issue was found, as shown by the config/pw snmp.html "System contact" field. Recommendations For versions prior to B1.2.4, update to version B1.2.4 or later to resolve the issue...

PT-2019-12262

Name of the Vulnerable Software and Affected Versions Carel pCOWeb versions prior to B1.2.4 Description An issue in Carel pCOWeb allows the device to store cleartext passwords in the /config/pw changeusers.html file, potentially enabling someone with access to the device to read sensitive...

CVE-2019-10855

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database...

iransub2.pw XSS vulnerability

Open Bug Bounty ID: OBB-641714 Description| Value ---|--- Affected Website:| iransub2.pw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ns21.pw XSS vulnerability

Open Bug Bounty ID: OBB-610991 Description| Value ---|--- Affected Website:| ns21.pw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mp3cool2.pw XSS vulnerability

Open Bug Bounty ID: OBB-572606 Description| Value ---|--- Affected Website:| mp3cool2.pw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pw.myersinfosys.com XSS vulnerability

Open Bug Bounty ID: OBB-454810 Description| Value ---|--- Affected Website:| pw.myersinfosys.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Amazon Linux AMI : 389-ds-base (ALAS-2015-501)

An information disclosure flaw was found in the way the 389 Directory Server stored information in the Changelog that is exposed via the 'cn=changelog' LDAP sub-tree. An unauthenticated user could in certain cases use this flaw to read data from the Changelog, which could include sensitive...

Sql injection

Multiple SQL injection vulnerabilities in Postfix Admin aka postfixadmin before 2.3.5 allow remote authenticated users to execute arbitrary SQL commands via 1 the pw parameter to the pacrypt function, when mysqlencrypt is configured, or 2 unspecified vectors that are used in backup files generate...

PT-2014-2208

Name of the Vulnerable Software and Affected Versions Postfix Admin versions prior to 2.3.5 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the pw parameter to the pacrypt function when mysql encrypt is configured, or through...

Gravity Board X 2.0 BETA (Public Release 3) - SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit code use LWP::Simple; pri...

PT-2013-3257

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the dissect pw eth heuristic function due to incorrect handling of apparent Ethernet address values at the beginning of MPLS data...

CVE-2011-0432

Multiple SQL injection vulnerabilities in the getuserinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL commands via the 1 user or 2 pw argument. NOTE: some of these details are obtained from third party...

PT-2011-2341

Name of the Vulnerable Software and Affected Versions PyWebDAV versions prior to 0.9.4.1 Description The issue allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 pw argument in the get userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py...

PT-2010-5509

Name of the Vulnerable Software and Affected Versions Injader version 2.4.4 Description The issue concerns SQL injection vulnerabilities in the login.php file. When magic quotes gpc is disabled, remote attackers can execute arbitrary SQL commands via the un and pw parameters in the login...

CVE-2010-4505: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 un and 2 pw parameters...

CVE-2010-3608: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 password pw parameters to a admin.php or b user.php...

FreeBSD setusercontext()函数绕过安全限制漏洞

BUGTRAQ ID: 42533 FreeBSD就是一种运行在Intel平台上、可以自由使用的开放源码Unix类系统。 在以其他用户的权限运行时lib/libutil/loginclass.c文件中的setusercontext函数应用了特定的用户设置，这允许本地用户通过创建特制的/.loginconf文件并通过OpenSSH登录更改某些受限制的资源。 FreeBSD 8.0 FreeBSD 7.2 厂商补丁： FreeBSD ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

wizmall 6.4 CSRF Vulnerabilities

Exploit for php platform in category web applications ================================ wizmall 6.4 CSRF Vulnerabilities ================================ Author: pyw1414 Software Link: http://www.shop-wiz.com/board/main/view/root/wizmall01/159/0 Version: 6.4 UTF-8 For php Tested on: XP SP3 -= CSRF...