ClipBucket SQL Injection Vulnerability (CNVD-2018-04993)

ClipBucket is an open source video sharing software developed by Arslan team. The software allows you to share videos to video sites and supports the lights off effect when watching a movie. A SQL injection vulnerability exists in versions prior to ClipBucket 4.0.0 Release 4902. A remote attacker...

Gespage Cross-Site Scripting Vulnerability

Gespage is an application for managing and monitoring printing devices from the French company Gespage. A cross-site scripting vulnerability exists in Gespage. A remote attacker could exploit this vulnerability by adding a printer with a specially crafted name or by injecting arbitrary web script...

CVE-2017-17933

cgi/surgeftpmgr.cgi aka the Web Manager interface on TCP port 7021 or 9021 in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter...

PHP Scripts Mall Resume Clone Script SQL Injection Vulnerability (CNVD-2018-00492)

Resume Clone Script is a resume clone script from PHP Scripts Mall. PHP Scripts Mall Resume Clone Script suffers from a SQL injection vulnerability. A remote attacker can exploit this vulnerability by injecting the 'username' parameter into the forget.php file to obtain user or sensitive data abo...

CVE-2017-17931

PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...

CVE-2017-17931

PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...

Sql injection

PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter...

Cross site scripting

A cross site scripting XSS vulnerability exists in CheckMK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the outputformat parameter, and the username parameter of failed HTTP basic authentication...

CVE-2017-11507

A cross site scripting XSS vulnerability exists in CheckMK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the outputformat parameter, and the username parameter of failed HTTP basic authentication...

CPA Lead Reward Script SQL Injection Vulnerability

CPA Lead Reward Script is a social research script. A SQL injection vulnerability exists in CPA Lead Reward Script. A remote attacker can exploit this vulnerability to inject SQL commands with the 'username' parameter...

Expiring Download Links SQL Injection Vulnerability

Protected Links - Expiring Download Links is a download link adding script, through which you can set the number of clicks and the time of existence of the link, etc.. A SQL injection vulnerability exists in Protected Links - Expiring Download Links version 1.0. A remote attacker can inject SQL...

CVE-2017-15977

Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter...

Sql injection

Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter...

CVE-2017-15986

CPA Lead Reward Script allows SQL Injection via the username parameter...

CVE-2017-15977

Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter...

CVE-2017-15986

CPA Lead Reward Script allows SQL Injection via the username parameter...

CVE-2017-15977

Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter...

CVE-2017-14980

Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long username parameter to /login...

CVE-2015-7257

ZTE ADSL ZXV10 W300 modems W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 allow remote authenticated non-administrator users to change the admin password by intercepting an outgoing password change request, and changing the username parameter from "support" to "admin"...

D-Link DIR-600M Device Cross-Site Scripting Vulnerability

D-Link DIR-600M is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the 'username' parameter of the form2userconfig.cgi file in versions prior to C1v3.05ENB01beta20170306 of the D-Link DIR-600M device. A remote attacker can use this vulnerability to...