82 matches found
CVE-2020-13433
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter...
Sql injection
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter...
CVE-2020-13433
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter...
CVE-2020-13433
CVE-2020-13433 affects Jason2605 AdminPanel 4.0 and is a SQL injection vulnerability exploitable through the hidden editPlayer.php parameter. Public sources in the Connected documents describe the root cause as a lack of validation of externally entered SQL statements, enabling partial to high-im...
CVE-2020-13433: Improper Neutralization of Special Elements used in an SQL Command
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter...
imaginevip.com XSS vulnerability
Open Bug Bounty ID: OBB-572592 Description| Value ---|--- Affected Website:| imaginevip.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
AfterLogic Aurora / Webmail XSS Vulnerability (Aug 2017)
AfterLogic Aurora/WebMail is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
CVE-2017-14597
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...
Design/Logic Flaw
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...
CVE-2017-14597
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...
CVE-2017-14597
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...
CVE-2017-14597
Affected software: AfterLogic WebMail 7.7 and Aurora 7.7.5; component: AdminPanel via adminpanel/modules/pro/inc/ajax.php. Issue: cross-site scripting (XSS) vulnerability exploitable via the txtDomainName field during domain addition. Root cause: improper handling of input in the AdminPanel domai...
CVE-2017-14597: Improper Neutralization of Input During Web Page Generation
AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain...
AfterLogic WebMail and Aurora Cross-Site Scripting Vulnerabilities
AfterLogic WebMail and Aurora are both products of AfterLogic, Inc. AfterLogic Aurora is a set of enterprise-class e-mail servers.WebMail is an e-mail client.AdminPanel is one of the back-end management systems. A cross-site scripting vulnerability exists in AfterLogic WebMail version 7.7 and...
actionlabs.com.ph XSS vulnerability
Vulnerable URL: http://actionlabs.com.ph/adminpanel/ Details: Description| Value ---|--- Patched:| Yes, at 07.02.2017 Latest check for patch:| 07.02.2017 15:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11368014 VIP website status:| No Check actionlabs.com....
WordPress LeagueManager Plugin 3.8 - SQL Injection
No description provided by source. !/usr/bin/ruby Exploit Title: WordPress LeagueManager Plugin v3.8 SQL Injection Google Dork: inurl:/wp-content/plugins/leaguemanager/ Date: 13/03/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://wordpress.org/extend/plugins/leaguemanager/ Software Link...
Php AdminPanel Free version 1.0.5 - Remote File Disclosure Vuln
No description provided by source. Php AdminPanel Free version 1.0.5 Remote File Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...
Hloun Support Management System 3.0 SQL Injection / Bypass
Hloun Support Management System version 3.0 suffers from authentication bypass and remote SQL injection vulnerabilities. fixhashuser$COOKIE'onlineadmin'; $userquery = "SELECT FROM member WHERE username='".$memberhash'username'."' AND password='".$memberhash'password'."'"; $member =...
WordPress LeagueManager Plugin 3.8 - SQL Injection
Exploit for php platform in category web applications Description: An SQL Injection vulnerability exists in the leagueid parameter of a function call made by the leaguemanagerexport page. This request is processed within the leaguemanager.php: if isset$POST'leaguemanagerexport'...
CVE-2012-6047
Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...