Hardcoded credentials

Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=updatef&username= or admin/user.php?form=removef&username= or admin/config/diff.php?app= URI...

CVE-2019-12094

Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=updatef&username= or admin/user.php?form=removef&username= or admin/config/diff.php?app= URI...

CVE-2019-12094

Horde Groupware Webmail Edition through 5.2.22 allows XSS via an admin/user.php?form=updatef&username= or admin/user.php?form=removef&username= or admin/config/diff.php?app= URI...

CVE-2019-12094

CVE-2019-12094 affects Horde Groupware Webmail Edition through 5.2.22. The vulnerability allows XSS via crafted URIs such as admin/user.php?form=update_f&user_name=, admin/user.php?form=remove_f&user_name=, or admin/config/diff.php?app=, as documented in the CVE entry and OSV/NVD references. The ...

CVE-2019-9661

Stored XSS exists in YzmCMS 5.2 via the admin/systemmanage/userconfigedit.html "value" parameter,...

CVE-2018-14517

SeaCMS 6.61 has two XSS issues in the adminconfig.php file via certain form fields...

SeaCMS Cross-Site Scripting Vulnerability (CNVD-2018-14550)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version 6.61. A remote attacker can exploit this vulnerability by sending the 'site name...

CVE-2016-2002

The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417...

Hewlett Packard Enterprise Vertica validateAdminConfig Processor Arbitrary Command Execution Vulnerability

Hewlett Packard Enterprise Vertica is a data mining analysis system for SQL databases from Hewlett Packard Enterprise HPE. A security vulnerability exists in the validateAdminConfig processor in HPE Vertica. A remote attacker could exploit the vulnerability by providing the 'mcPort' parameter...

NavBoard 2.6.0 - Remote Code Execution Exploit

No description provided by source. ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

DimacCMS xs <=1.3 Multiple Vulnerability

Exploit for php platform in category web applications Title : DimacCMS xs Exploit : 1 http://localhost/path...

DimacCMS XS 1.3 SQL Injection / Database Disclosure

Title : DimacCMS xs Exploit : 1 http://localhost/path/SiteResources/Data/...

CVE-2006-6479

Multiple cross-site scripting XSS vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in 1 erreurinscription.php, 2 Templates/admin.dwt.php, 3 Templates/commun.dwt.php, 4 membre.dwt.php, and 5 admin/adminconfig/Aide.php...

CVE-2006-1545

Direct static code injection vulnerability in admin/config.php in vscripts aka Kuba Kunkiewicz VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php...

CVE-2002-1821

Ultimate PHP Board UPB 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct requests to 1 adminmembers.php, 2 adminconfig.php, 3 admincat.php, or 4 adminforum.php...