EUVD-2012-1941

Malware in sbrugna...

CVE-2022-2727: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be...

CVE-2012-1932: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Wolf CMS 0.75 and earlier allows remote attackers to inject arbitrary web script or HTML via the settingadminemail parameter to admin/setting...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15863)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setResetOptions method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'adminemail' and...

CVE-2015-6528

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

Uiga Personal Portal index.php (view) SQL Injection

No description provided by source. Exploit Title: Uiga Personal Portal index.php view SQL Injection Vulnerability Date: 27-4-2010 Author: 41.w4r10r Software Link : http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork ...

phpMyNewsletter <= 0.8b5 (archives.php msg_id) SQL Injection Exploit

No description provided by source. !/usr/bin/php ?php / Name: PHPMyNewsletter = 0.8b5 SQL Injection Credits: Charles "real" F. charlesfolathotmail.fr Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter =...

phpMyNewsletter 0.8b5 - msg_id SQL Injection

phpMyNewsletter 0.8b5 - msgid SQL Injection !/usr/bin/php Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter \n\n"; if$argc\n"; $url = $argv1; $c =...

phpMyNewsletter 0.8b5 - 'msg_id' SQL Injection

!/usr/bin/php Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter \n\n"; if$argc\n"; $url = $argv1; $c =...

CVE-2006-5119: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the 1 adminname or 2 adminpass parameter in a admin/login.php, or the 3 adminemail parameter in b admin/passwordforgotten.php...

CVE-2005-3996

SQL injection vulnerability in admin/passwordforgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the adminemail parameter...

CVE-2005-3996: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/passwordforgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the adminemail parameter...