CVE-2020-25118

The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager...

CVE-2020-25118

The CVE-2020-25118 entry relates to vBulletin 5.6.3 Admin CP, where the Style Options Settings Title in Styles Manager is susceptible to XSS. Affected component is the Admin CP’s Styles Manager Style Options Settings heading, with the underlying issue enabling cross-site scripting. The NVD provid...

CVE-2020-25119

The CVE-2020-25119 entry describes a cross-site scripting (XSS) vulnerability in vBulletin 5.6.3 where an attacker can inject script via the Title of a Child Help Item in the Login/Logoff section of the User Manual in Admin CP. Public references confirm this vulnerability and its presence across ...

CVE-2020-25120

The CVE-2020-25120 entry affects vBulletin Admin Control Panel in version 5.6.3, where an XSS vulnerability exists in the admincp/search.php?do=dosearch URI. The vulnerability enables cross‑site scripting with a low overall severity (NVD CVSS v2 base score 3.5; CVSS v3.1 base score 4.8) and impac...

CVE-2020-25120

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI...

CVE-2020-25121

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options...

CVE-2020-25121

Affected software: vBulletin 5.6.3 Admin CP. Vulnerability: cross-site scripting (XSS) via the Paid Subscription Email Notification field in the Options. Root cause: input in that field is not properly sanitized, enabling injection in the Admin CP context. Impact: XSS could affect authenticated a...

CVE-2020-25122

CVE-2020-25122 affects the Admin CP of vBulletin 5.6.3 . The vulnerability is an XSS via a Rank Type to the User Rank Manager . According to CVSS data in the sources, the issue has a Network attack vector with Medium to Low impact depending on the metric (CVSS 3.1: base score 4.8, MEDIUM, require...

CVE-2020-25122

The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager...

CVE-2020-25123

CVE-2020-25123 affects vBulletin 5.6.3: the Admin CP is vulnerable to cross-site scripting via the Smilie Title field in the Smilies Manager. The root cause, as described in the provided documents, is insufficient escaping/validation of the Smilie Title input, allowing injected script when the Sm...

CVE-2020-25124

The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI...

CVE-2019-1010112

OECMS v4.3.R60321 and v4.3 later is affected by: Cross Site Request Forgery CSRF. The impact is: The victim clicks on adding an administrator account. The component is: admincp.php. The attack vector is: network connectivity. The fixed version is: v4.3...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

CVE-2016-10738

Zenbership v107 has CSRF via admin/cp-functions/event-add.php...

holbrookemotorcompany.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-572084 Description| Value ---|--- Affected Website:| holbrookemotorcompany.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SHOP-INET 4 (show_cat2.php grid) - SQL Injection Vulnerability

No description provided by source. SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...

Netbutikker <= 4 - Remote SQL Injection Vulnerabilities

No description provided by source. Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and...

NextBBS 0.6.0 Authentication Bypass / SQL Injection / XSS

waraxe-2012-SA080 - Multiple Vulnerabilities in NextBBS 0.6.0 =============================================================================== Author: Janek Vind "waraxe" Date: 27. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-80.html Description of vulnerable software:...

Pligg 1.1.3 SQL Injection

By Dr.NeT -Abdullah hacker team Title Pligg 1.1.3 SQL injection Vulnerabilities Language Php Download http://www.pligg.com/download.php Version 1.1.3 date 2010/12/24 info Dr.NeT @ Abdullah hacker team : [email protected] Exploit : http://localhost/cloud.php?range=SQL Admin cp :...

MyHobbySite 1.01 - SQL Injection Authentication Bypass

MyHobbySite 1.01 - SQL Injection Authentication Bypass Exploit Title: MyHobbySite 1.01 SQL injection, Bypass Authentication Vulnerability Date: 12-09-2010 Author: YuGj VN Email: [email protected] Software Link: http://www.myhobbysite.net/index.php?page=15 Version: v1.01 Bug Code: if...