129 matches found
CVE-2020-25122
The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager...
CVE-2020-25122
CVE-2020-25122 affects the Admin CP of vBulletin 5.6.3 . The vulnerability is an XSS via a Rank Type to the User Rank Manager . According to CVSS data in the sources, the issue has a Network attack vector with Medium to Low impact depending on the metric (CVSS 3.1: base score 4.8, MEDIUM, require...
CVE-2020-25123
CVE-2020-25123 affects vBulletin 5.6.3: the Admin CP is vulnerable to cross-site scripting via the Smilie Title field in the Smilies Manager. The root cause, as described in the provided documents, is insufficient escaping/validation of the Smilie Title input, allowing injected script when the Sm...
CVE-2020-25124
The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI...
CVE-2019-1010112
OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery CSRF. The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3...
CVE-2016-10738
Zenbership v107 has CSRF via admin/cp-functions/event-add.php...
CVE-2016-10738
Zenbership v107 has CSRF via admin/cp-functions/event-add.php...
holbrookemotorcompany.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-572084 Description| Value ---|--- Affected Website:| holbrookemotorcompany.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SHOP-INET 4 (show_cat2.php grid) - SQL Injection Vulnerability
No description provided by source. SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...
Netbutikker <= 4 - Remote SQL Injection Vulnerabilities
No description provided by source. Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and...
NextBBS 0.6.0 Authentication Bypass / SQL Injection / XSS
waraxe-2012-SA080 - Multiple Vulnerabilities in NextBBS 0.6.0 =============================================================================== Author: Janek Vind "waraxe" Date: 27. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-80.html Description of vulnerable software:...
Pligg 1.1.3 SQL Injection
By Dr.NeT -Abdullah hacker team Title Pligg 1.1.3 SQL injection Vulnerabilities Language Php Download http://www.pligg.com/download.php Version 1.1.3 date 2010/12/24 info Dr.NeT @ Abdullah hacker team : [email protected] Exploit : http://localhost/cloud.php?range=SQL Admin cp :...
MyHobbySite 1.01 - SQL Injection Authentication Bypass
MyHobbySite 1.01 - SQL Injection Authentication Bypass Exploit Title: MyHobbySite 1.01 SQL injection, Bypass Authentication Vulnerability Date: 12-09-2010 Author: YuGj VN Email: [email protected] Software Link: http://www.myhobbysite.net/index.php?page=15 Version: v1.01 Bug Code: if...
MyHobbySite 1.01 SQL Injection / Authentication Bypass Vulnerability
Exploit for php platform in category web applications ==================================================================== MyHobbySite 1.01 SQL Injection / Authentication Bypass Vulnerability ==================================================================== Exploit Title: MyHobbySite 1.01 SQL...
Qwerty CMS (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================== Qwerty CMS id Remote SQL Injection Vulnerability ================================================== QWERTY CMS lite - SQL INJ = Injection in index.php variable: id...
Qwerty CMS - id SQL Injection
Qwerty CMS - id SQL Injection QWERTY CMS lite - SQL INJ Found: b3 from GraBBerZ.com = Injection in index.php variable: id http://site/index.php?act=publ&id=-3+UNION+SELECT+1,2,3,4,5 = Administrator Table: rkh8t5po Columns: secret873ktlW,pass459khyf Column with pass: pass459khyf Admin CP:...
Qwerty CMS - 'id' SQL Injection
QWERTY CMS lite - SQL INJ Found: b3 from GraBBerZ.com = Injection in index.php variable: id http://site/index.php?act=publ&id=-3+UNION+SELECT+1,2,3,4,5 = Administrator Table: rkh8t5po Columns: secret873ktlW,pass459khyf Column with pass: pass459khyf Admin CP: /admin/admin.php = CMS PAGE :...
SHOP-INET 4 - grid SQL Injection
SHOP-INET 4 - grid SQL Injection SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...
SHOP-INET 4 - 'grid' SQL Injection
SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...
netbutikker-sql.txt
Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and users table have diffrents names y...