53 matches found
Exploit for Code Injection in Moodle
CVE-2021-36394 Update table or Change password Admin: C...
CVE-2021-37393
In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the...
CVE-2021-37393
In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the...
Cross site scripting
In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. Attacker can use "update password" function to inject XSS payloads into nickname variable, and achieve stored XSS. Users who view the articles published by the injected user will trigger the...
RPCMS 跨站脚本漏洞
RPCMS is a software application. A website CMS system. A cross-site scripting vulnerability exists in RPCMS, which stems from the fact that the "Nickname" variable is not properly sanitized before it is displayed on a page in RPCMS v1.8 and below. The vulnerability can be exploited to inject an X...
CSRF in extension "Change password for frontend users" (fe_change_pwd)
The extension fails to implement a CSRF protection for update password action...
SQL Injection
salt is vulnerable to SQL injection. User-controlled parameter values are directly concatenated into the update password SQL queries, allowing an attacker to inject arbitrary SQL statements via the user and host parameters...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15868)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the 'updatepw' and 'setAdminPassword' methods in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker can exploit this vulnerability to execute arbitrar...
Travel Portal Script Admin Password Change - CSRF Vulnerability
No description provided by source. ===================================================== Travel PORTAL = Admin Password Change CSRF Exploit ===================================================== My + Author : KnocKout Contact : [email protected] Software info |Web App. : Travel PORTAL |Price : 299...
Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)
Travel Portal Script - Cross-Site Request Forgery Admin Password Change ===================================================== Travel PORTAL Explotation| Exploit.HTML ========CSRF Html Exploit========= Exploited by KnocKout Travel Portal - Remote Admin Password Change CSRF Exploited by KnocKout...
Event Ticket PORTAL <= Admin Password Change (CSRF) Exploit
Exploit for php platform in category web applications =========================================================== Event Ticket PORTAL Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in useradmin.php in Open Media Collectors Database OpenDb 1.0.6 allows remote attackers to change arbitrary passwords via an updatepassword action...
