15847 matches found
CVE-2021-20376
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568...
CVE-2021-20376
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568...
CVE-2021-20376: Observable Discrepancy
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568...
Simple Online College Entrance Exam System 1.0 SQL Injection
Exploit Title: Simple Online College Entrance Exam System 1.0 - SQLi Authentication Bypass Date: 07.10.2021 Exploit Author: Mevlüt Yılmaz Vendor Homepage: https://www.sourcecodester.com/php/14976/simple-online-college-entrance-exam-system-php-and-sqlite-free-source-code.html Software Link:...
PT-2021-13925
Name of the Vulnerable Software and Affected Versions: IBM Sterling File Gateway versions 2.2.0.0 through 6.1.1.0 Description: The issue allows an authenticated attacker to enumerate usernames due to an observable discrepancy in returned messages. Recommendations: For IBM Sterling File Gateway...
Online-Food-Ordering-Web-App SQL Injection
CVE-2021-41647 SQL Injection in Online-Food-Ordering-Web-App The Online-Food-Ordering-Web-App is vulnerable to un-authenticated error and time-based blind SQL Injection attacks. The username parameter on the /login.php page does not sanitize the user input, an attacker is able to bypass the login...
CVE-2021-20376
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observable discrepancy in returned messages. IBM X-Force ID: 195568...
CVE-2021-42536
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
Use of a Broken or Risky Cryptographic Algorithm in anonaddy/anonaddy
Description MD5 and SHA-1 are popular cryptographic hash algorithms often used to verify the integrity of messages and other data. Recent advances in cryptanalysis have discovered weaknesses in both algorithms. Consequently, MD5 and SHA-1 should no longer be relied upon to verify the authenticity...
PT-2021-20931
Name of the Vulnerable Software and Affected Versions: Wowza Streaming Engine versions 4.8.11+5 through 4.8.13 Description: A Cross-Site Request Forgery CSRF issue allows a remote attacker to delete a user account via the "/enginemanager/server/user/delete.htm" API endpoint using the userName...
Wowza Media Systems Wowza Streaming Engine 跨站请求伪造漏洞
Wowza Media Systems Wowza Streaming Engine is a powerful, customizable and scalable media server software from Wowza Media Systems, USA. It is used to reliably stream high-quality video and audio to any device, anywhere. A cross-site request forgery vulnerability exists in Wowza Streaming Engine...
CVE-2020-21493
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames...
Design/Logic Flaw
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames...
CVE-2020-21493
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames...
Xiuno BBS 访问控制错误漏洞
Xiuno BBS is an open source forum program based on PHP and MySQL. Xiuno BBS suffers from an Access Control Error vulnerability that stems from the product routeuser.php that allows retrieval of usernames. No details of the vulnerability are provided at this time...
CVE-2020-21493: Undefined Security Weakness
An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames...
PT-2021-10630
Name of the Vulnerable Software and Affected Versions: Xiuno BBS version 4.0.4 Description: An issue in the component routeuser.php of Xiuno BBS allows attackers to enumerate usernames. Recommendations: For Xiuno BBS version 4.0.4, consider restricting access to the routeuser.php component to...
CVE-2021-41511: Improper Neutralization of Special Elements used in an SQL Command
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication...
CVE-2021-40970
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter...