Dicoogle PACS 2.5.0 - Directory Traversal

Dicoogle PACS 2.5.0 - Directory Traversal Exploit Title: Dicoogle PACS 2.5.0 - Directory Traversal Date: 2018-05-25 Software Link: http://www.dicoogle.com/home Version: Dicoogle PACS 2.5.0-201712291522 Category: webapps Tested on: Windows 2012 R2 Exploit Author: Carlos Avila Contact:...

Path traversal

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

CVE-2017-17778

Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...

CVE-2017-17776

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

CVE-2017-17776

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

CVE-2017-17776: Exposure of Sensitive Information to an Unauthorized Actor

Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...

Paid To Read Script Cross-Site Scripting Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can exploit this vulnerability by sending the 'tier' parameter to the...

PHP Scripts Mall Paid To Read Script SQL Injection Vulnerability

PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can inject SQL into the Paid To Read Script 2.0.5 by sending the 'uid' parameter t...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

CVE-2017-17651

Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter...

SQL injection vulnerability in the uid parameter in the admin_members.php page of the Ocean CMS website builder system

Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the /admin/adminmembers.php page of the Ocean CMS system. The lack of filtering of the "uid" parameter allows attackers to exploit the vulnerability to obtain sensitive database information...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

Session fixation

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

CVE-2017-6529

CVE-2017-6529 affects dnaTools dnaLIMS 4-2015s13. The vulnerability allows session hijacking by guessing and supplying the UID parameter in URLs that require authentication, where the UID appears to serve as a session identifier. Public descriptions demonstrate that multiple pages rely on a UID p...

PT-2017-17131

Name of the Vulnerable Software and Affected Versions dnaLIMS version 4-2015s13 Description An issue was discovered in dnaLIMS, where it is vulnerable to session hijacking by guessing the UID parameter. Recommendations For dnaLIMS version 4-2015s13, consider implementing additional security...

CVE-2017-6529

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter. Recent assessments: h00die at March 27, 2020 4:08pm UTC reported: The uid field is passed within a GET parameter. These are sequential integers, so it is trivial to...

CVE-2017-6529: Insufficient Session Expiration

An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID parameter...

Video Sharing Script 4.94 - uid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Video Sharing Script 4.94 - 'uid' Parameter SQL Injection Google Dork: N/A Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/video-sharing-script/ Demo:...