User Management System 2.0 Cross Site Scripting

Exploit Title: User Management System 2.0 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Version: v2.0 Tested on: Xampp Credit: İsmail BOZKU...

User Management System 2.0 - Persistent Cross-Site Scripting

Exploit Title: User Management System 2.0 - Persistent Cross-Site Scripting Author: Besim ALTINOK Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/user-registration-login-and-user-management-system-with-admin-panel/ Version: v2.0 Tested on: Xampp Credit: İsmail BOZKU...

CI User Login and Management 1.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: CI User Login and Management 1.0 - Arbitrary File Upload Exploit Author: Ihsan Sencan Vendor Homepage 1: http://www.webprojectbuilder.com/item/user-login-and-management Vendor Homepage 2:...

MKPortal 1.2.1 - Multiple Vulnerabilities

waraxe-2009-SA070 - Multiple Vulnerabilities in MKPortal = 1.2.1 ============================================================================== Author: Janek Vind "waraxe" Date: 15. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-70.html Description of vulnerable software...

CVE-2006-6922

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6922

CVE-2006-6922 describes a SQL injection vulnerability in Deadlock User Management System (phpdeadlock) 0.64 and earlier, allowing remote attackers to execute arbitrary SQL via unspecified vectors. The affected product is the Deadlock User Management System (phpdeadlock); the flaw is in the handli...

CVE-2006-6922

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6922: Undefined Security Weakness

SQL injection vulnerability in Deadlock User Management System phpdeadlock 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

FUDforum file access and SQL Injection

FUDforum file access and SQL Injection PROGRAM: FUDforum VENDOR: Advanced Internet Designs Inc. [email protected] HOMEPAGE: http://fud.prohost.org/ VULNERABLE VERSIONS: 2.0.2, possibly others IMMUNE VERSIONS: 2.2.0 and above LOGIN REQUIRED: no some issues, admin some issues SEVERITY: medium...