2770 matches found
Apex Software House SQL Injection
| \ | / /| | | / || \ | D | \ | || o || | | / | |\ || / || || | | | \ | |/ \ || | || || | | | . \ | |\ || | || | || | | ||||||||||||||| Exploit name: Apex Software House admin page bypass Google dork: Make one by yourself ! Exploit author: Risman Tested on: Linux Security Risk : High Category:...
A1 Creation SQL Injection
| \ | / /| | | / || \ | D | \ | || o || | | / | |\ || / || || | | | \ | |/ \ || | || || | | | . \ | |\ || | || | || | | ||||||||||||||| Exploit name: A1 Creation admin page bypass Google dork: Make one by yourself ! Exploit author: Risman Tested on: Linux Security Risk : Category: Web...
SuperCheapCallSltd SQL Injection
| \ | / /| | | / || \ | D | \ | || o || | | / | |\ || / || || | | | \ | |/ \ || | || || | | | . \ | |\ || | || | || | | ||||||||||||||| Exploit name: SuperCheapCallSltd admin page bypass Google dork: Make one by yourself ! Exploit author: Risman Tested on: Linux Security Risk : High Category:...
Design/Logic Flaw
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors...
CVE-2012-4471: Undefined Security Weakness
The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors...
Sql injection
SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the memberloginid cookie...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject arbitrary web script or HTML via the path parameter...
CVE-2012-4990
SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...
PT-2012-3635
Name of the Vulnerable Software and Affected Versions Wolf CMS versions 0.75 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This includes deleting users via the user id number to "admin/user/delete", deleting pages vi...
CVE-2012-1897: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Wolf CMS 0.75 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 delete users via the user id number to admin/user/delete; 2 delete pages via the page id number to admin/page/delete;...
CVE-2012-4994
SQL injection vulnerability in admin/admin.php in LimeSurvey before 1.91+ Build 120224 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a browse action. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbitrary SQL commands via the fcountrycode parameter...
PT-2012-5161 · Pbboard · Pbboard
Name of the Vulnerable Software and Affected Versions: PBBoard version 2.1.4 Description: The issue allows remote administrators to execute arbitrary PHP code by uploading a file with an executable extension to the addons directory via admin.php, and then accessing it directly. This can be...
Information disclosure
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database...
CVE-2010-5092
The CVE-2010-5092 issue affects SilverStripe 2.4.0 where the Add Member dialog stores passwords in plain text, enabling local information disclosure by reading the database. Root cause: plaintext password storage. Remediation: upgrade to a fixed release (e.g., SilverStripe 2.4.1) as indicated by ...
CVE-2010-5092
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database...
CVE-2010-5092: Undefined Security Weakness
The Add Member dialog in the Security admin page in SilverStripe 2.4.0 saves user passwords in plaintext, which allows local users to obtain sensitive information by reading a database...
CVE-2012-4238
Cross-site scripting XSS vulnerability in admin/code/tceeditanswer.php in TCExam before 11.3.008 allows remote authenticated users with level 5 or greater permissions to inject arbitrary web script or HTML via the questionsubjectid parameter...
DEBIAN-CVE-2012-2768
Multiple cross-site scripting XSS vulnerabilities in the topic administration page in the RTFM extension 2.0.4 through 2.4.3 for Best Practical Solutions RT allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...