2751 matches found
eBrigade ERP 4.5 Arbitrary File Download
!/usr/bin/python import mechanize, sys, cookielib, requests import colorama, urllib, re, random, urllib2 import wget from colorama import Fore from tqdm import tqdm from pathlib import Path def bannerche: print ''' @-------------------------------------------------------------@ | eBrigade ERP "...
Sitefinity Administration Panel Login Form Detected
Sitefinity Administration Panel has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No...
CVE-2018-1000625
Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account. An attacker could exploit this vulnerability to log in as an admin on any installation and gain unauthorized access to the system...
Design/Logic Flaw
MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray parameter...
CVE-2018-20486
MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray parameter...
Cross-Site Scripting (XSS)
microweber/microweber susceptible to cross-site scripting XSS. The vulnerability is possible because Admin login template has user-controllable parameters...
CVE-2018-1000826
Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...
Cross site scripting
Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...
CVE-2018-1000826
Microweber version = 1.0.7 contains a Cross Site Scripting XSS vulnerability in Admin login form template that can result in Execution of JavaScript code...
CVE-2018-1000826
CVE-2018-1000826 affects Microweber
LAOBANCMS SQL Injection Vulnerability
Laoban CMS LAOBANCMS content management system is based on PHP + MYSQL environment developed by the old class of open-source website building system . LAOBANCMS 2.0 has a SQL injection vulnerability. Attackers can exploit this vulnerability through the admin/login.php guanliyuan parameter for SQL...
CVE-2018-19224
An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...
Spoofing
An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...
Sql injection
An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter...
CVE-2018-19221
An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter...
CVE-2018-19221
An issue was discovered in LAOBANCMS 2.0. It allows SQL Injection via the admin/login.php guanliyuan parameter...
CVE-2018-19224
An issue was discovered in LAOBANCMS 2.0. /admin/login.php allows spoofing of the id and guanliyuan cookies...
CVE-2018-19224
LAOBANCMS 2.0 contains a vulnerability in /admin/login.php that allows spoofing of the id and guanliyuan cookies. The records (CVE-2018-19224) confirm this issue but do not provide the underlying technical flaw, affected versions beyond 2.0, specific exploit details, or remediation guidance in th...
phptpoint Pharmacy Management System 1.0 - username SQL Injection
phptpoint Pharmacy Management System 1.0 - username SQL Injection Exploit Title: phptpoint Pharmacy Management System 1.0 - 'username' SQL injection Date: 2018-10-24 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link:...