2734 matches found
Cross site scripting
dayrui FineCms 5.0.9 has Cross Site Scripting XSS in admin/Login.php via a payload in the username field that does not begin with a '' character...
FineCms Cross-Site Scripting Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the admin/Login.php file in FineCms version 5.0.9. A remote attack can be exploited to inject arbitrary script code or HTML into the admin/Login.p...
Song Song picture management system backstage exists universal password login vulnerability
Song Song picture management system using ASP + ACCESS + DIV + CSS + AJAX development, can be configured in support of ASP environment of any host. Song Song picture management system V8 version of the /admin/adminlogincheck.asp page there is a universal password login vulnerability. Attackers ca...
ZYCH Free Planning Enterprise Website Management System Exists Universal Password Login Vulnerability
ZYCH Free Planner Enterprise Website Management System is an intelligent ASP website management program based on Free Planner Enterprise Website Management System. A universal password login vulnerability exists in the '/admin/login.asp' page of ZYCH Free Planning Enterprise Website Management...
ZvingSoft ZCMS SQL Injection Vulnerability
ZvingSoft ZCMS Zeyuan Web Content Management System is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology from China Zeyuan Software ZvingSoft. The system provides interactive components, visualization topics, content collection, content...
mycompanyadmin.com XSS vulnerability
Open Bug Bounty ID: OBB-254688 Description| Value ---|--- Affected Website:| mycompanyadmin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ems.northeastprecast.com XSS vulnerability
Vulnerable URL: http://ems.northeastprecast.com/admin/Security/Login.asp?silent===/admin/main.asp=1"...
orangemenservices.com XSS vulnerability
Vulnerable URL: http://www.orangemenservices.com/admin/Security/Login.asp?silent===/admin/schedule/schedule.asp=1"...
CVE-2017-6689
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the admin user, aka an Insecure Default Administrator Credentials Vulnerability. More Information: CSCvc76661. Known Affected Releases: 2.29.76...
CVE-2017-6685
A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected...
CVE-2017-6686
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known...
CVE-2017-9100
login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt...
Design/Logic Flaw
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...
Multiple SONY network cameras information disclosure vulnerability
SONY SNC-CH115 and so on are the network camera products of Japan Sony Sony company. An information disclosure vulnerability exists in several SONY network cameras using firmware versions prior to 2.7.2. The vulnerability can be exploited by an attacker to log in to the device with administrator...
Weblate: full path disclosure at hosted.weblate.org/admin/accounts/profile/
Browsing this link https://hosted.weblate.org/admin/accounts/profile/ will ask for admin username and password as asked when browsing https://hosted.weblate.org/admin/accounts/ or https://hosted.weblate.org/admin/ hence disclosing the directory path of forbidden area. screenshot : path.png also i...
Brother Devices - Authentication Bypass / Password Change Exploit
Most of Brother devices web authorization can be bypassed through a trivial bug in the login process. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
ZYCHCMS V04 Login Authentication Bypass Vulnerability in /admin/login.asp File
ZYCHCMS is an enterprise website management system. A login authentication bypass vulnerability exists in the /admin/login.asp file in ZYCHCMS V04. The vulnerability allows attackers to bypass authentication to enter the backend and obtain sensitive information...
CVE-2016-7834
SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550,...