Cross site scripting

tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter...

CVE-2018-19091

The CVE-2018-19091 entry concerns Tianti 2.3, where a reflected XSS vulnerability exists in the user management module. The issue is triggered via the tianti-module-admin/user/list userName parameter, enabling an attacker to inject scripts that may execute in a victim’s browser. The available con...

CVE-2018-19091

tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter...

Cisco Registered Envelope Service Information Disclosure Vulnerability

A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to an insecu...

CI User Login and Management 1.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: CI User Login and Management 1.0 - Arbitrary File Upload Exploit Author: Ihsan Sencan Vendor Homepage 1: http://www.webprojectbuilder.com/item/user-login-and-management Vendor Homepage 2:...

CI User Login And Management 1.0 Shell Upload

Exploit Title: CI User Login and Management 1.0 - Arbitrary File Upload Dork: N/A Date: 2018-10-30 Exploit Author: Ihsan Sencan Vendor Homepage 1: http://www.webprojectbuilder.com/item/user-login-and-management Vendor Homepage 2: https://sourceforge.net/projects/user-management-system/ Software...

CI User Login and Management 1.0 - Arbitrary File Upload

Exploit Title: CI User Login and Management 1.0 - Arbitrary File Upload Dork: N/A Date: 2018-10-30 Exploit Author: Ihsan Sencan Vendor Homepage 1: http://www.webprojectbuilder.com/item/user-login-and-management Vendor Homepage 2: https://sourceforge.net/projects/user-management-system/ Software...

User Management 1.1 - Cross-Site Scripting

Exploit Title: User Management 1.1 - Cross-Site Scripting Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: http://ardawan.com/ Software Link : http://um.ardawan.com Software : User Management Version : 1.1 Vulernability Type : Cross-site Scripting Vulenrability : Stored XSS CVE :...

User Management 1.1 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: User Management 1.1 - Cross-Site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: http://ardawan.com/ Software Link : http://um.ardawan.com Software : User Management Version : 1.1 Vulernability Type : Cross-site...

User Management 1.1 - Cross-Site Scripting

User Management 1.1 - Cross-Site Scripting Exploit Title: User Management 1.1 - Cross-Site Scripting Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: http://ardawan.com/ Software Link : http://um.ardawan.com Software : User Management Version : 1.1 Vulernability Type : Cross-site...

User Management Cross-Site Scripting Vulnerability

User Management is a user manager. A cross-site scripting vulnerability exists in the upload section of User Management version 1.1. A remote attacker can use this vulnerability to inject arbitrary web script or HTML...

CVE-2018-18419

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI...

CVE-2018-18419

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI...

Cross site scripting

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI...

CVE-2018-18419

CVE-2018-18419: Stored XSS in ARDAWAN.COM User Management 1.1. The vulnerability is triggered via a crafted .jpg filename uploaded through the /account endpoint, enabling script injection in user management’s upload section. Documented across multiple sources (NVD entry, CNVD/CVE mirrors, exploit...

CVE-2018-18419

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI...

Unspecified Vulnerability in Oracle E-Business Suite User Management

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.User Management is one of the use...

User Management 1.1 Cross Site Scripting

Exploit Title: User Management 1.1 - Cross-site Scripting Date: 2018-10-16 Exploit Author: Ismail Tasdelen Vendor Homepage: http://ardawan.com/ Software Link : http://um.ardawan.com Software : User Management Version : 1.1 Vulernability Type : Cross-site Scripting Vulenrability : Stored XSS CVE :...

CVE-2018-3236

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Reports. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2018-3236

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Reports. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...