Weak password vulnerability in the background management system of the website built by Luoyang Chancheng Network Technology Co.

Ltd. built website background management system is a website positioning analysis and recommendations, including website planning layout and structure of a complete set of solutions. There is a weak password vulnerability in the file /mgr/login.php of the background management system of the websi...

Open Source Real Estate Script 3.6.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: real-estate classified script Sql Injection Date: 2015-05-29 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.phpscriptsmall.com/product/open-source-real-estate-script/ Version: 3.6.0...

Dounia Creation 1.4 Weak Password / SQL Injection

======================================================================== | Title : Dounia Creation V1.4 Mullti Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://www.douniacreation.com/...

Meteocontrol WEB'log Information Disclosure Vulnerability

Meteocontrol WEB'log is a web-based SCADA system that provides energy and power configuration management functions using different connected devices. An information disclosure vulnerability exists in multiple Meteocontrol WEB'log products that could be exploited by an unauthorized attacker to gai...

Ecava IntegraXor Information Disclosure Vulnerability (CNVD-2016-02341)

Ecava IntegraXor is a set of Web-based tools for creating and running HMI interfaces for SCADA systems. An information disclosure vulnerability exists in Ecava IntegraXor prior to version 5.0 build 4522 that stems from the program not setting the HTTPOnly flag in the session cookie. A remote...

CubeCart Cross-Site Request Forgery Vulnerability (CNVD-2016-01940)

CubeCart is an open source PHP e-commerce software system. A cross-site request forgery vulnerability exists in CubeCart. When a local file is deleted, the source of the request fails to authenticate due to HTTP. A remote authentication attacker can create a specially crafted malicious web page...

BlueCMS v1.6 sp1 /admin/login.php SQL注入漏洞

No description provided by source...

Schneider Electric SBO AS - Multiple Vulnerabilities

Schneider Electric SBO AS - Multiple Vulnerabilities Exploit Title: Schneider Electric SBO / AS Multiple Vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.schneider-electric.com Versions Reported: Automation Server Series AS, AS-P, v1.7 and prior CVE-ID: CVE-2016-2278 About...

absas.in XSS vulnerability

Vulnerable URL: http://www.absas.in/admin/login.php?msg=%3Csvg/onload=confirm%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5304981 Google Pagerank| 0 VIP websi...

jspxcms admin backend login page cross-site scripting vulnerability

jspxcms is an open source, Java-based content management system CMS. A cross-site scripting vulnerability exists in the administration backend login page of jspxcms version v5.2.4, due to analyzing the search box on the front page of Jspxcms for user inputs that are not input filtered. This...

eyou反垃圾邮件网关系统在/php/admin_login.php处存在SQL注入漏洞

No description provided by source...

nexusarts.com.au XSS vulnerability

Vulnerable URL: http://www.nexusarts.com.au/adminlogin.php?errmessage=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

southwestmichiganfirst.com XSS vulnerability

Vulnerable URL: https://www.southwestmichiganfirst.com/admin/loginform.cfm?errmsg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 09.02.2016 Latest check for patch:| 09.02.2016 20:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Beescms V4.0 在文件mx_form.php处存在后台登陆绕过漏洞

No description provided by source...

CG-WLBARGS does not properly perform authentication

Overview CG-WLBARGS provided by Corega Inc is a wireless LAN router. CG-WLBARGS does not properly perform authentication. Kousuke Kawahira of DWANGO Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

chathamanglers.com XSS vulnerability

Vulnerable URL: http://www.chathamanglers.com/admin/login.cfm?Message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 20363124 Google...

4images 1.7.11 Code Execution

!/usr/local/bin/python Exploit for 4images 1.7.11 Code Execution vulnerability An admin account is required to use this exploit Curesec GmbH import sys import re import argparse import requests requires requests lib parser = argparse.ArgumentParser parser.addargument"url", help="base url to...

mleoa.ca XSS vulnerability

Vulnerable URL: http://www.mleoa.ca/admin-login.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No Check mleoa.c...

antiquemarketplacecafe.com XSS vulnerability

Vulnerable URL: http://antiquemarketplacecafe.com/admin/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:46 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...

ferona.cz XSS vulnerability

Vulnerable URL: https://www.ferona.cz/cze/admin/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 595426 Google Pagerank| 4...