Sql injection

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory...

CVE-2020-35245

CVE-2020-35245 affects Flamingo (FlamingoIM) up to 2020-09-29 with a SQL injection vulnerability in UserManager::addUser. Documented risk scores: CVSS2 base 7.5 (HIGH) and CVSS3.1 base 9.8 (CRITICAL). Exploit details are not provided in the connected documents; no remediation or patch version is ...

CVE-2020-35245

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser...

CVE-2020-35244

The CVE-2020-35244 entry identifies Flamingo (aka FlamingoIM) as affected through 2020-09-29 due to a SQL injection in UserManager::addGroup. The connected records confirm the component and the underlying flaw (SQL injection), but do not provide a concrete list of affected versions, affected conf...

CVE-2020-35244

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup...

CVE-2020-35243

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb...

CVE-2020-35243

Flamingo (aka FlamingoIM) through 2020-09-29 contains a SQL injection vulnerability in UserManager::updateUserInfoInDb. The CVE is supported by multiple sources (NVD entry and Red Hat PR) showing high/severe impact: CVSSv2 base 7.5 (Partial confidentiality/integrity/availability impact) and CVSSv...

CVE-2020-35242

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory...

CVE-2020-35243: Improper Neutralization of Special Elements used in an SQL Command

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb...

CVE-2020-35244: Improper Neutralization of Special Elements used in an SQL Command

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup...

CVE-2020-35242: Improper Neutralization of Special Elements used in an SQL Command

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserTeamInfoInDbAndMemory...

CVE-2020-35245: Improper Neutralization of Special Elements used in an SQL Command

Flamingo aka FlamingoIM through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser...

CVE-2019-16313

ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code...

PT-2018-13040 · Dokuwiki · Dokuwiki

Name of the Vulnerable Software and Affected Versions: DokuWiki versions 2018-04-22a and earlier Description: The issue allows remote attackers to exfiltrate sensitive data and to execute arbitrary code via a value that is mishandled in a CSV export in the /lib/plugins/usermanager/admin.php file...

Digital-Campus2. 0 digital campus platform usermanger. aspx paramUserID parameter SQL injection vulnerability

No description provided by source...

CVE-2016-0710: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the 1 role or 2 user parameter to services/usermanager/users/...

ActiveX UserManager 2.03 Buffer Overflow

No description provided by source. html object classid='clsid:E5D2CE27-5FA0-11D2-A666-204C4F4F5020' id='target'/object script language='vbscript' ' Exploit Title: ActiveX UserManager 2.03 Buffer Overflow ' Date: January 16, 2011 ' Author: Blake ' Software Link:...

CVE-2012-2999: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the web interface in Cerberus FTP Server before 5.0.5.0 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user account or 2 reconfigure the state of the FTP service, as demonstrated by a...

ActiveX UserManager 2.03 Buffer Overflow

Exploit for windows platform in category dos / poc ' Exploit Title: ActiveX UserManager 2.03 Buffer Overflow ' Date: January 16, 2011 ' Author: Blake ' Software Link: http://www.brothersoft.com/activex-usermanager-14519.html ' Version: 2.03 ' Tested on: Windows XP SP3 / IE7 in VirtualBox '...

ActiveX UserManager 2.03 Buffer Overflow

' Exploit Title: ActiveX UserManager 2.03 Buffer Overflow ' Date: January 16, 2011 ' Author: Blake ' Software Link: http://www.brothersoft.com/activex-usermanager-14519.html ' Version: 2.03 ' Tested on: Windows XP SP3 / IE7 in VirtualBox ' Overwrites SEH with 00410041 but I could not find a useab...