Lucene search
+L

2330 matches found

CNVD
CNVD
•added 2019/10/28 12:00 a.m.•8 views

SQL Injection Vulnerability in Billing Master ss***.html Page

Billing Master is a real estate agent ERP management system. A SQL injection vulnerability exists in the Billing Master ss.html page, which can be exploited by attackers to obtain sensitive information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/09 12:00 a.m.•9 views

Billing Master suffers from SQL injection vulnerability

Billing Master is the first provider of real estate management system and housing management system source code, the system has a full-featured listings of customer management. There is a SQL injection vulnerability in Billing Master, which can be exploited by attackers to obtain sensitive...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/08 12:00 a.m.•6 views

File upload vulnerability in Billing Master Ke***.cl***.php page

Billing Master is the first provider of real estate management system and housing management system source code, the system has a full-featured listings of customer management. Ke.cl.php page has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

7.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/10/04 12:00 a.m.•36 views

LabCollector 5.423 - SQL Injection

LabCollector 5.423 - SQL Injection Exploit Title: LabCollector Laboratory Information System 5.423 - Multiples SQL Injection Date: 09/09/2019 Software Links/Project: https://www.labcollector.com/clientarea/downloads.php Version: LabCollector Laboratory Information System 5.423 Exploit Author:...

0.1AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/17 12:00 a.m.•13 views

Piwigo Cross-Site Scripting Vulnerability (CNVD-2019-31999)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in Piwigo version 2.9.5 in admin.php?page=accountbilling. The vulnerability...

9.6CVSS6.4AI score0.01355EPSS
SaveExploits4References1
NVD
NVD
•added 2019/09/13 1:15 p.m.•23 views

CVE-2019-13364

admin.php?page=accountbilling in Piwigo 2.9.5 has XSS via the vatnumber, billingname, company, or billingaddress parameter. This is exploitable via CSRF...

9.6CVSS8.9AI score0.01355EPSS
SaveExploits4References5
Cvelist
Cvelist
•added 2019/09/13 12:24 p.m.•48 views

CVE-2019-13364

admin.php?page=accountbilling in Piwigo 2.9.5 has XSS via the vatnumber, billingname, company, or billingaddress parameter. This is exploitable via CSRF...

9AI score0.01355EPSS
SaveExploits4References5
Positive Technologies
Positive Technologies
•added 2019/09/13 12:00 a.m.•13 views

PT-2019-13294 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 2.9.5 Description: The issue concerns an XSS exploit via the "admin.php?page=account billing" endpoint, specifically through the vat number, billing name, company, or billing address parameters. This is also exploitable through...

9.6CVSS9AI score0.01355EPSS
SaveExploits4References10
zdt
zdt
•added 2019/08/19 12:00 a.m.•25 views

Neo Billing 3.5 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Neo Billing 3.5 - Stored Cross Site Scripting Vulnerability Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/neo-billing-accounting-invoicing-and-crm-software/20896547 Version: 3.5 CWE : CWE-79 Description...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2019/08/19 12:00 a.m.•139 views

Neo Billing 3.5 Cross Site Scripting

Exploit Title: Neo Billing 3.5 - Stored Cross Site Scripting Vulnerability Date: 18.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/neo-billing-accounting-invoicing-and-crm-software/20896547 Version: 3.5 CWE : CWE-79 Description Neo Billing os an accounting,...

7.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2019/08/19 12:00 a.m.•25 views

Neo Billing 3.5 - Persistent Cross-Site Scripting

Neo Billing 3.5 - Persistent Cross-Site Scripting Exploit Title: Neo Billing 3.5 - Stored Cross Site Scripting Vulnerability Date: 18.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/neo-billing-accounting-invoicing-and-crm-software/20896547 Version: 3.5 CWE : CWE-7...

6.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2019/08/19 12:00 a.m.•265 views

Neo Billing 3.5 - Persistent Cross-Site Scripting

Exploit Title: Neo Billing 3.5 - Stored Cross Site Scripting Vulnerability Date: 18.8.2019. Exploit Author: n1x MS-WEB Vendor Homepage: https://codecanyon.net/item/neo-billing-accounting-invoicing-and-crm-software/20896547 Version: 3.5 CWE : CWE-79 CVE: CVE-2020-23518 Description Neo Billing os a...

5.4CVSS5.7AI score0.02001EPSS
SaveExploits2
NVD
NVD
•added 2019/07/23 11:15 p.m.•34 views

CVE-2019-11273

Pivotal Container Services PKS versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information...

4.3CVSS3.9AI score0.01032EPSS
SaveExploits0References1
OSV
OSV
•added 2019/07/23 11:15 p.m.•17 views

CVE-2019-11273

Pivotal Container Services PKS versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information...

4.3CVSS5.8AI score0.01032EPSS
SaveExploits0References1
Prion
Prion
•added 2019/07/23 11:15 p.m.•27 views

Design/Logic Flaw

Pivotal Container Services PKS versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information...

4CVSS4.6AI score0.01032EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/07/23 10:34 p.m.•40 views

CVE-2019-11273 PKS Telemetry logs credentials

Pivotal Container Services PKS versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information...

2.2CVSS4.5AI score0.01032EPSS
SaveExploits0References1
CVE
CVE
•added 2019/07/23 10:34 p.m.•102 views

CVE-2019-11273

The CVE-2019-11273 entry concerns Pivotal Container Services (PKS) with affected versions 1.3.x before 1.3.7 and 1.4.x before 1.4.1. A vulnerable component logs usernames and passwords to the billing database, allowing a remote authenticated user with access to those logs to potentially retrieve ...

4.3CVSS4.2AI score0.01032EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/07/23 12:00 a.m.•5 views

PT-2019-12220

Name of the Vulnerable Software and Affected Versions Pivotal Container Services PKS versions 1.3.x prior to 1.3.7 Pivotal Container Services PKS versions 1.4.x prior to 1.4.1 Description The issue concerns a vulnerable component in Pivotal Container Services PKS that logs the username and passwo...

4.3CVSS0.01032EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/23 12:00 a.m.•8 views

CVE-2019-11273: Insertion of Sensitive Information into Log File

Pivotal Container Services PKS versions 1.3.x prior to 1.3.7, and versions 1.4.x prior to 1.4.1, contains a vulnerable component which logs the username and password to the billing database. A remote authenticated user with access to those logs may be able to retrieve non-sensitive information...

4.3CVSS5.7AI score0.01032EPSS
SaveExploits0References3
Trend Micro Simply Security
Trend Micro Simply Security
•added 2019/07/17 2:36 p.m.•98 views

New Azure Marketplace Pay-As-You-Go Billing for Trend Micro Deep Security as a Service

Cloud adoption continues to rise as organizations reduce their data center footprint, look to cloud native technologies to improve their application design and output, and strive to improve scalability and management of resources and systems. In a recent survey conducted by analyst firm ESG, 87% ...

7.4AI score
SaveExploits0
Rows per page
Query Builder