Design/Logic Flaw

MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray parameter...

CVE-2018-20486

MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray parameter...

PT-2018-15408

Name of the Vulnerable Software and Affected Versions MetInfo versions 6.x through 6.1.3 Description The issue allows for XSS via the "/admin/login/login check.php" API endpoint, specifically through the url array parameter. Recommendations For MetInfo versions 6.x through 6.1.3, avoid using the...

CVE-2018-20486: Improper Neutralization of Input During Web Page Generation

MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray parameter...

Cross-Site Scripting (XSS)

microweber/microweber susceptible to cross-site scripting XSS. The vulnerability is possible because Admin login template has user-controllable parameters...

CVE-2018-1000826

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

Cross site scripting

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

CVE-2018-1000826

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

CVE-2018-1000826

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

CVE-2018-1000826

CVE-2018-1000826 affects Microweber

PT-2018-9550

Name of the Vulnerable Software and Affected Versions Microweber versions prior to 1.1 Description The issue concerns a Cross Site Scripting XSS vulnerability in the Admin login form template, which can lead to the execution of JavaScript code. Recommendations For Microweber versions prior to 1.1...

CVE-2018-1000826: Improper Neutralization of Input During Web Page Generation

Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...

LAOBANCMS SQL Injection Vulnerability

Laoban CMS LAOBANCMS content management system is based on PHP + MYSQL environment developed by the old class of open-source website building system . LAOBANCMS 2.0 has a SQL injection vulnerability. Attackers can exploit this vulnerability through the admin/login.php guanliyuan parameter for SQL...

CVE-2018-19221

An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter...

CVE-2018-19224

An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...

Sql injection

An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter...

Spoofing

An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...

CVE-2018-19221

An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter...

CVE-2018-19224

An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...

CVE-2018-19224

LAOBANCMS 2.0 contains a vulnerability in /admin/login.php that allows spoofing of the id and guanliyuan cookies. The records (CVE-2018-19224) confirm this issue but do not provide the underlying technical flaw, affected versions beyond 2.0, specific exploit details, or remediation guidance in th...