PT-2020-16109 · Cmsuno · Cmsuno

Name of the Vulnerable Software and Affected Versions: CMSuno version 1.6.2 Description: The issue allows an attacker to inject malicious PHP code as a username while changing their username and password. After the attacker logs in to the application, their code will be executed, enabling an...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

PT-2020-15612

Name of the Vulnerable Software and Affected Versions DesignMasterEvents Conference management version 1.0.0 Description The issue allows SQL Injection via the username field on the administrator login page. Recommendations For DesignMasterEvents Conference management version 1.0.0, avoid using t...

CVE-2020-23980: Improper Neutralization of Special Elements used in an SQL Command

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-15540

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-15540

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...

Sql injection

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-15540: Improper Neutralization of Special Elements used in an SQL Command

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page...

PT-2020-14490

Name of the Vulnerable Software and Affected Versions We-com OpenData CMS version 2.0 Description The issue allows SQL Injection via the username field on the administrator login page. This could potentially lead to unauthorized access to sensitive data. Recommendations For We-com OpenData CMS...

CVE-2014-8945

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...

CVE-2014-8945: Improper Neutralization of Special Elements used in an OS Command

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...

CVE-2020-8656

An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via the username field to getApiKey in include/apifunctions.php...

RarmaRadio 2.72.4 - (username) Denial of Service Exploit

Exploit Title: RarmaRadio 2.72.4 - 'username' Denial of Service PoC Discovery by: chuyreds Vendor Homepage: http://www.raimersoft.com/rarmaradio.html Software Link : http://www.raimersoft.com/downloads/rarmaradiosetup.exe Tested Version: 2.72.4 Vulnerability Type: Denial of Service DoS Local Test...

CVE-2020-8090

The Username field in the Storage Service settings of A1 WLAN Box ADB VV2220v2 devices allows stored XSS after a successful Administrator login...

CVE-2020-8090

CVE-2020-8090: A1 WLAN Box ADB VV2220v2 devices are affected in the Storage Service’s Username field, where stored XSS can occur after a successful Administrator login. The issue is described as a stored cross-site scripting vulnerability impacting the Username field within the Storage Service se...

CVE-2020-8090: Improper Neutralization of Input During Web Page Generation

The Username field in the Storage Service settings of A1 WLAN Box ADB VV2220v2 devices allows stored XSS after a successful Administrator login...

PT-2020-19938

Name of the Vulnerable Software and Affected Versions A1 WLAN Box ADB VV2220v2 devices affected versions not specified Description The issue concerns a stored XSS vulnerability in the Username field of the Storage Service settings. This can be exploited after a successful Administrator login...

CVE-2020-7990

Adive Framework 2.0.8 has admin/user/add userName XSS...

CVE-2020-5842

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page...

CVE-2020-5842

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page...