2918 matches found
Friends in War Make or Break 1.7 - Authentication Bypass Vulnerability
Exploit for php platform in category web applications x Type: Admin login bypass via SQLi x Vendor: http://software.friendsinwar.com/ x Script Name: Make or Break x Script Version: 1.7 x Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 x Author: Anarchy Angel x More info...
SQL injection vulnerability in the init function of iCMS latest version V7admincp.class.php page
iCMS is a free, clean, efficient, and useful PHP content management system. The latest version of iCMS V7admincp.class.php page init function has a SQL injection vulnerability that can be exploited by attackers to bypass the backend and directly log into the system to obtain sensitive information...
Friends in War Make or Break 1.7 - Authentication Bypass
Friends in War Make or Break 1.7 - Authentication Bypass x Type: Admin login bypass via SQLi x Vendor: http://software.friendsinwar.com/ x Script Name: Make or Break x Script Version: 1.7 x Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 x Author: Anarchy Angel x Mail:...
Cross site scripting
dayrui FineCms 5.0.9 has Cross Site Scripting XSS in admin/Login.php via a payload in the username field that does not begin with a '' character...
CVE-2017-11581
dayrui FineCms 5.0.9 has Cross Site Scripting XSS in admin/Login.php via a payload in the username field that does not begin with a '' character...
FineCms Cross-Site Scripting Vulnerability
FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the admin/Login.php file in FineCms version 5.0.9. A remote attack can be exploited to inject arbitrary script code or HTML into the admin/Login.p...
Song Song picture management system backstage exists universal password login vulnerability
Song Song picture management system using ASP + ACCESS + DIV + CSS + AJAX development, can be configured in support of ASP environment of any host. Song Song picture management system V8 version of the /admin/adminlogincheck.asp page there is a universal password login vulnerability. Attackers ca...
ZYCH Free Planning Enterprise Website Management System Exists Universal Password Login Vulnerability
ZYCH Free Planner Enterprise Website Management System is an intelligent ASP website management program based on Free Planner Enterprise Website Management System. A universal password login vulnerability exists in the '/admin/login.asp' page of ZYCH Free Planning Enterprise Website Management...
ZvingSoft ZCMS SQL Injection Vulnerability
ZvingSoft ZCMS Zeyuan Web Content Management System is a set of enterprise-level web content management system CMS based on J2EE technology and AJAX technology from China Zeyuan Software ZvingSoft. The system provides interactive components, visualization topics, content collection, content...
mycompanyadmin.com XSS vulnerability
Open Bug Bounty ID: OBB-254688 Description| Value ---|--- Affected Website:| mycompanyadmin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ems.northeastprecast.com XSS vulnerability
Vulnerable URL: http://ems.northeastprecast.com/admin/Security/Login.asp?silent===/admin/main.asp=1"...
orangemenservices.com XSS vulnerability
Vulnerable URL: http://www.orangemenservices.com/admin/Security/Login.asp?silent===/admin/schedule/schedule.asp=1"...
CVE-2017-6686
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known...
CVE-2017-6685
A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected...
CVE-2017-6689
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the admin user, aka an Insecure Default Administrator Credentials Vulnerability. More Information: CSCvc76661. Known Affected Releases: 2.29.76...
PT-2017-17241
Name of the Vulnerable Software and Affected Versions Cisco Ultra Services Framework Staging Server version 21.0.0 Description A vulnerability exists due to insecure default credentials, allowing an authenticated, remote attacker with access to the management network to log in as an admin user of...
CVE-2017-6686: Initialization of a Resource with an Insecure Default
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the management network to log in as an admin or oper user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76699. Known...
CVE-2017-6685: Initialization of a Resource with an Insecure Default
A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management network to log in as an admin user of the affected device, aka an Insecure Default Credentials Vulnerability. More Information: CSCvc76681. Known Affected...
CVE-2017-9100
login.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass authentication by entering more than 20 blank spaces in the password field during an admin login attempt...