393 matches found
CVE-2018-1000092
CMS Made Simple 2.2.5 is affected by a CSRF vulnerability in the Admin profile page; attacker could trigger unauthorized actions via a specially crafted page. The issue appears fixed in 2.2.6. Public details consistently describe CSRF as the vulnerability class and mention potential denial-of-ser...
CVE-2018-5651
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodestart parameter...
CVE-2017-10673
admin/profile.php in GetSimple CMS 3.x has XSS in a name field...
GetSimple CMS 'admin/profile.php' Cross-Site Scripting Vulnerability
Cagintranet Networks GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A cross-site scripting vulnerability exists in the name field of the...
ZeusCart 4.0 - CSRF 漏洞
No description provided by source. document.myform.submit;...
CVE-2013-2671
Multiple cross-site scripting XSS vulnerabilities in the Brother MFC-9970CDW printer with firmware L 1.10 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 val parameter to admin/adminmain.html; 3 id, 4 val, or 5 arbitrary parameter name QUERYSTRING to...
HackerOne: Privilege escalation..., or not?!
I just created the admin profile, go check it out: https://hackerone.com/nimda Or see attached image! This is very much related! svg/onload=alert1// Free iPad Here! This is Unrela...
BeehiveForum 0.9.1 Multiple Vulnerabilities
Exploit for php platform in category web applications =========================================== BeehiveForum 0.9.1 Multiple Vulnerabilities =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...
Automated Link Exchange Portal 1.3 Multiple Remote Vulnerabilities
No description provided by source. ------------------------------------------------------------------------- Automated Link Exchange Portal V1.3 Multiple Remote Vulnerabilities --------------------------------------------------------------- Founder : TiGeR-Dz Home:www.h4ckx.com Script: Automated...
Automated Link Exchange Portal 1.3 Bypass
------------------------------------------------------------------------- Automated Link Exchange Portal V1.3 Multiple Remote Vulnerabilities --------------------------------------------------------------- Founder : TiGeR-Dz Home:www.h4ckx.com Script: Automated Link Exchange Portal Version 1.3...
Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit
Exploit for unknown platform in category web applications ========================================================== Zomplog ДобавлÑем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" ПовторÑем пароль "Confirm...
miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities
No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...
Design/Logic Flaw
The 1 login, 2 admin profile edit, 3 reminder, 4 edit profile, 5 profile view, 6 gallery view, 7 gallery comment, and 8 gallery feedback capabilities in web-app.org WebAPP before 0.9.9.7 do not verify presence of users in memberlist.dat, which has unknown impact and remote attack vectors...