116 matches found
CVE-2024-22770 Hitron Systems DVR HVR-16781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-16781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22770
A vulnerability exists in Hitron Systems DVR HVR-16781 (versions 1.03 through 4.02) due to improper input validation (CWE-20 ). If default administrative credentials are used, an attacker can exploit this flaw to cause a denial-of-service condition or perform a network attack. While some sources ...
CVE-2024-22769
A high-severity improper input validation vulnerability (CWE-20) exists in Hitron Systems DVR HVR-8781 versions 1.03 through 4.02 . An attacker can exploit this flaw while utilizing the default admin name and password to cause a denial-of-service condition or a general network attack. CISA has re...
CVE-2024-22769 Hitron Systems DVR HVR-8781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-8781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2024-22768 Hitron Systems DVR HVR-4781 Improper Input Validation Vulnerability
Improper Input Validation in Hitron Systems DVR HVR-4781 1.034.02 allows an attacker to cause network attack in case of using defalut admin ID/PW...
CVE-2023-4845
A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file accounteditquery.php. The manipulation of the argument adminid leads to sql injection. The attack can be initiated remotely. The exploit...
PT-2023-30854 · Sourcecodester · Sourcecodester Simple Membership System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple Membership System. The issue affects the file account edit query.php, where the manipulation of the admin id...
CVE-2022-23380
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...
CVE-2022-23380: Improper Neutralization of Special Elements used in an SQL Command
There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...
PT-2022-15965
Name of the Vulnerable Software and Affected Versions taocms version 3.0.2 Description There is a SQL injection issue in the background of taocms, specifically in the parameter id within the endpoint "/action=admin&id=2&ctrl=edit". Recommendations For taocms version 3.0.2, avoid using the paramet...
fauzantrif eLection SQL Injection Vulnerability
fauzantrif eLection is a web-based election system. A SQL injection vulnerability exists in fauzantrif eLection 2.0. An attacker can exploit this vulnerability to achieve remote code execution via the admin/ajax/opkandidat.php id parameter...
Detrix EDMS 1.2.3.1505 - SQL Injection Vulnerability
Exploit for php platform in category web applications !/usr/bin/php / Exploit Title: Detrix EDMS cleartext user password remote SQLI exploit Google Dork: Date: Jul 2019 Exploit Author: Burov Konstantin Vendor Homepage: forum.detrix.kz Software Link:...
Groupon Clone Script 3.01 - catid SQL Injection
Groupon Clone Script 3.01 - catid SQL Injection Exploit Title: Groupon Clone Script v3.01 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/groupon-clone-script/ Demo:...
YaBB SE <= 1.5.5 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl YaBB SE version = 1.5.5 commands execution exploit by RST/GHC GUI version = THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE coded by 1dt.w0lf http://rst.void.ru http://ghc.ru use Tk; use Tk::Menu; use LWP::UserAgent; $top = MainWindow-new...
wizmall 6.4 CSRF Vulnerabilities
Exploit for php platform in category web applications ================================ wizmall 6.4 CSRF Vulnerabilities ================================ Author: pyw1414 Software Link: http://www.shop-wiz.com/board/main/view/root/wizmall01/159/0 Version: 6.4 UTF-8 For php Tested on: XP SP3 -= CSRF...
wizmall 6.4 - Cross-Site Request Forgery
Exploit Title: wizmall 6.4 CSRF Vulnerabilities Date: 08/10/2010 Author: pyw1414 Software Link: http://www.shop-wiz.com/board/main/view/root/wizmall01/159/0 Version: 6.4 UTF-8 For php Tested on: XP SP3 -= CSRF Exploit - Change Admin ID/PW =- Wizmall 6.4 UTF-8 For php CSRF Vulnerabilities - Change...
Online Job Board - Authentication Bypass
Online Job Board - Authentication Bypass '/ -.- --------------------oOO------OOo----------------------------- | Online Job Board Auth Bypass SQL Injection Vulnerability | | works only with magicquotesgpc = off | ---------------------------------------------------------------- ! Discovered: cr4wl3...
Gravity Board X 2.0 Beta (Public Release 3) - SQL Injection
Gravity Board X 2.0 Beta Public Release 3 - SQL Injection !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit co...
Pre Classified Listings Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...
GLLCTS2 <= 4.2.4 (login.php detail) SQL Injection Exploit
No description provided by source. ?php settimelimit0; ignoreuserabort0; function addhtmlspace$count $out2 = strrepeat"",$count; return $out2; function writecontent$title,$desc,$content $out = "div class='content'div class='item'h1$title/h1div class='descr'$desc/divbrp$content/p/div"; return $out...