19 matches found
EUVD-2018-10307
Malware in sbrugna...
CVE-2018-18587
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash...
CVE-2021-21260
Online Invoicing System OIS is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini. In OIS version 4.0 there is a stored XSS which can enables an attacker takeover of the admin account through a payload that extracts a csrf...
CVE-2021-21260
Online Invoicing System OIS is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini. In OIS version 4.0 there is a stored XSS which can enables an attacker takeover of the admin account through a payload that extracts a csrf...
CVE-2021-21260
The CVE-2021-21260 entry describes a stored XSS in Online Invoicing System (OIS) v4.0, caused by unsanitized input reflected in app/items_view.php (Item description). This enables an attacker to potentially takeover an admin account by injecting a payload that extracts a CSRF token and issues a p...
BigProf Online Invoicing System Cross-Site Scripting Vulnerability (CNVD-2021-06953)
BigProf Online Invoicing System OIS is an easy invoicing tool for small businesses, consultants and freelancers created using AppGini. A cross-site scripting vulnerability exists in app/membershipsignup.php and app/admin/pageViewMembers.php in BigProf Online Invoicing System versions prior to 3.1...
BigProf Online Invoicing System Cross-Site Scripting Vulnerability (CNVD-2021-06952)
BigProf Online Invoicing System OIS is an easy invoicing tool for small businesses, consultants and freelancers created using AppGini. A stored cross-site scripting vulnerability exists in BigProf Online Invoicing System versions prior to 4.0. The vulnerability stems from the product failing to...
Online Clinic Management System 2.2 - HTML Injection
Online Clinic Management System 2.2 - HTML Injection Exploit Title: Online Clinic Management System 2.2 - HTML Injection Date: 2019-11-29 Exploit Author: Cemal Cihad ÇİFTÇİ Vendor Homepage: https://bigprof.com Software Download Link :...
Online Clinic Management System 2.2 - HTML Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Online Clinic Management System 2.2 - HTML Injection Exploit Author: Cemal Cihad ÇİFTÇİ Vendor Homepage: https://bigprof.com Software Download Link : https://bigprof.com/appgini/applications/online-clinic-management-system...
Online Inventory Manager 3.2 - Persistent Cross-Site Scripting
Online Inventory Manager 3.2 - Persistent Cross-Site Scripting Exploit Title: Online Inventory Manager 3.2 - Persistent Cross-Site Scripting Date: 2019-11-29 Exploit Author: Cemal Cihad ÇİFTÇİ Vendor Homepage: https://bigprof.com Software Link :...
Online Inventory Manager 3.2 Cross Site Scripting
Exploit Title: Online Inventory Manager 3.2 - Persistent Cross-Site Scripting Date: 2019-11-29 Exploit Author: Cemal Cihad ÇİFTÇİ Vendor Homepage: https://bigprof.com Software Link : https://bigprof.com/appgini/applications/online-inventory-manager Software : Online Inventory Manager Version : 3....
Online Inventory Manager 3.2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Online Inventory Manager 3.2 - Persistent Cross-Site Scripting Exploit Author: Cemal Cihad ÇİFTÇİ Vendor Homepage: https://bigprof.com Software Link : https://bigprof.com/appgini/applications/online-inventory-manager Software :...
BigProf AppGini Information Disclosure Vulnerability
BigProf AppGini is a suite of platforms for creating responsive data management applications from BigProf Software, Egypt. A security vulnerability exists in BigProf AppGini version 5.70 that stems from the program's use of MD5 hashing to store passwords in the database. An attacker could exploit...
CVE-2018-18587
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash...
CVE-2018-18587
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash...
CVE-2018-18587
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash...
CVE-2018-18587
CVE-2018-18587 affects BigProf AppGini 5.70, where passwords are stored in the database using MD5. The root cause is the use of MD5 hashing for password storage, leading to potential compromise of credentials (information disclosure). Connected sources corroborate the MD5-based storage in AppGini...
PT-2018-14531
Name of the Vulnerable Software and Affected Versions BigProf AppGini version 5.70 Description The issue concerns the storage of passwords in the database using the MD5 hash, which is considered insecure. Recommendations For BigProf AppGini version 5.70, consider updating the password storage...
