84 matches found
PT-2020-14487
Name of the Vulnerable Software and Affected Versions Vanguard plugin version 2.1 for WordPress Description An issue was discovered that allows XSS to occur via the mails/new title field, a product field to the "p/" URI, or the Products Search box. Recommendations For Vanguard plugin version 2.1,...
vanguardproperties.com Cross Site Scripting vulnerability OBB-1204483
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-14054
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
CVE-2020-14054
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
Sql injection
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
CVE-2020-14054
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
CVE-2020-14054
The CVE-2020-14054 vulnerability affects SOKKIA GNR5 Vanguard WEB (version 1.2, build 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3) and hardware version 212. A SQL injection vulnerability in the login page’s User Name/Password fields could allow remote attackers to bypass administrator authentication...
PT-2020-13865
Name of the Vulnerable Software and Affected Versions SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 SOKKIA GNR5 Vanguard hardware version 212 Description The issue allows remote attackers to bypass admin authentication via a SQL injection attack that uses th...
CVE-2020-14054: Improper Neutralization of Special Elements used in an SQL Command
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
Vanguard <= 2.1 - Multiple Cross-Site Scripting (XSS)
The plugin does not sanitise, validate or escape some of its parameters before outputting the back in various place, leading to either Stored or Reflected Cross-Site Scripting issues PoC Put the following payload in the In Products Search box: " POST /search HTTP/1.1 Accept:...
Vanguard 2.1 Cross Site Scripting
Exploit Title: Vanguard 2.1 Multi XSS Vunlerabilities Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/vanguard-marketplace-digital-products-php/20287975 Version: 2.1 Tested on: 5.4.0-4parrot1-amd64...
Vanguard <= 2.1 - Multiple Cross-Site Scripting (XSS)
The plugin does not sanitise, validate or escape some of its parameters before outputting the back in various place, leading to either Stored or Reflected Cross-Site Scripting issues Put the following payload in the In Products Search box: " POST /search HTTP/1.1 Accept:...
The Story of Sandworm, the Kremlin's Most Dangerous Hackers
For three years, WIRED has tracked the elite and shadowy Russian vanguard of cyberwar...
vanguardministries.org XSS vulnerability
Open Bug Bounty ID: OBB-608882 Description| Value ---|--- Affected Website:| vanguardministries.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SQL Injection Vulnerability in Vanguard Digitizing System
Vanguard Digital Technology Inc. provides web animation, graphic visual design, online advertising and marketing, and multimedia CD-ROM production services. A SQL injection vulnerability exists in the Vanguard Digital Web Building System. An attacker can exploit the vulnerability to obtain...
Vanguard Marketplace Digital Products PHP Cross-Site Request Forgery Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A cross-site request forgery vulnerability exists in Vanguard Marketplace Digital Products PHP. A remote attacker can use /search to inject web script or HTML or perfo...
Vanguard Marketplace Digital Products PHP Cross Site Scripting Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A cross-site scripting vulnerability exists in Vanguard Marketplace Digital Products PHP. A remote attacker can exploit this vulnerability by sending the 'phpsquery'...
Vanguard Marketplace Digital Products PHP SQL Injection Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A SQL injection vulnerability exists in Vanguard Marketplace Digital Products PHP version 1.4. A remote attacker can inject SQL commands by sending PATHINFO to the /p...
Vanguard Marketplace Digital Products PHP Arbitrary File Upload Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A security vulnerability exists in Vanguard Marketplace Digital Products PHP version 1.4. The vulnerability can be exploited to upload arbitrary files via the Add New...