BlueCMS v1.6 sp1 /admin/login.php SQL注入漏洞

No description provided by source...

Schneider Electric SBO AS - Multiple Vulnerabilities

Schneider Electric SBO AS - Multiple Vulnerabilities Exploit Title: Schneider Electric SBO / AS Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.schneider-electric.com Versions Reported: Automation Server Series AS, AS-P, v1.7 and prior CVE-ID: CVE-2016-2278 About...

absas.in XSS vulnerability

Vulnerable URL: http://www.absas.in/admin/login.php?msg=%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5304981 Google Pagerank| 0 VIP websi...

jspxcms admin backend login page cross-site scripting vulnerability

jspxcms is an open source, Java-based content management system CMS. A cross-site scripting vulnerability exists in the administration backend login page of jspxcms version v5.2.4, due to analyzing the search box on the front page of Jspxcms for user inputs that are not input filtered. This...

eyou反垃圾邮件网关系统在/php/admin_login.php处存在SQL注入漏洞

No description provided by source...

nexusarts.com.au XSS vulnerability

Vulnerable URL: http://www.nexusarts.com.au/adminlogin.php?errmessage=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

southwestmichiganfirst.com XSS vulnerability

Vulnerable URL: https://www.southwestmichiganfirst.com/admin/loginform.cfm?errmsg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 09.02.2016 Latest check for patch:| 09.02.2016 20:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Beescms V4.0 在文件mx_form.php处存在后台登陆绕过漏洞

No description provided by source...

CG-WLBARGS does not properly perform authentication

Overview CG-WLBARGS provided by Corega Inc is a wireless LAN router. CG-WLBARGS does not properly perform authentication. Kousuke Kawahira of DWANGO Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

chathamanglers.com XSS vulnerability

Vulnerable URL: http://www.chathamanglers.com/admin/login.cfm?Message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20363124 Google...

4images 1.7.11 Code Execution

!/usr/local/bin/python Exploit for 4images 1.7.11 Code Execution vulnerability An admin account is required to use this exploit Curesec GmbH import sys import re import argparse import requests requires requests lib parser = argparse.ArgumentParser parser.addargument"url", help="base url to...

mleoa.ca XSS vulnerability

Vulnerable URL: http://www.mleoa.ca/admin-login.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check mleoa.c...

antiquemarketplacecafe.com XSS vulnerability

Vulnerable URL: http://antiquemarketplacecafe.com/admin/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

ferona.cz XSS vulnerability

Vulnerable URL: https://www.ferona.cz/cze/admin/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 595426 Google Pagerank| 4...

iran.tv XSS vulnerability

Vulnerable URL: http://www.iran.tv/site/admin/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

svkexternwebbkap.svenskakyrkan.se XSS vulnerability

Vulnerable URL: https://svkexternwebbkap.svenskakyrkan.se/Admin/Login/Login.aspx?ReturnUrl=/default.aspx?id=1324984=1" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

ZEDx 2.0 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : ZEDx 2.0 - Blind SQL Injection Vulnerability Author : ZwX Version : ZEDx 2.0 Demo Online : http://demo.zedx.org/ Vendor : http://www.zedx.org/ Date : 09/12/2014 ------------------------------- Description ------------------------------...

SearchBlox File Exfiltration Vulnerability

OVERVIEW Oana Murarasu of Ixia has identified a file exfiltration vulnerability in SearchBlox’s web-based proprietary search engine application. SearchBlox has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following...

Weak Password Vulnerability in Government Website Management System of E-Tron Networks

E-Tron web government website management system is a system for government Internet access system, government website system customization services. A weak password vulnerability exists in part of the back-end of the NetGov ad management system. An attacker can utilize the vulnerability to log in...

麦达特色库检索平台多处SQL注入#2

简要描述： 前几天提交了一次，说我跟http://wooyun.org/bugs/wooyun-2015-0120725 重复了， 这个也是我之前提交的，有一段时间了...除了都是SQL注入外，好像没什么共同点了吧, 不仅不是同一处，也不是同一类型的注入。 不知道是审核大哥没注意，还是乌云改规则了，同一SQL注入都算一个问题... 另外也不是刻意刷洞分开提交的，也是前几天看了下之前自己提交过的漏洞新发现的，不知道怎么没通过,之前这种都不算重复吧... 刚好今天又发现了一处问题，一起再提交一次。 详细说明： 刻意参见我之前提交的漏洞...