EUVD-2011-4936

Malware in sbrugna...

EUVD-2020-17317

Malware in sbrugna...

CVE-2020-24600

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.capsendMail GET request...

CVE-2020-24600

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.capsendMail GET request...

Sql injection

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.capsendMail GET request...

CVE-2020-24600

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.capsendMail GET request...

CVE-2020-24600: Improper Neutralization of Special Elements used in an SQL Command

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.capsendMail GET request...

CVE-2020-24600

CVE-2020-24600 affects Shilpi CAPExWeb 1.1. It enables SQL injection via the servlet capexweb.cap_sendMail when a GET parameter is used, with CVSS v3.1 base score 9.8 (CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Impacts include confidentiality, integrity, and availability. The vulnerability i...

CVE-2020-24600

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.capsendMail GET request...

Shilpi CAPExWeb SQL注入漏洞

Shilpi CAPExWeb is a web portal of Shilpi India. A security vulnerability exists in Shilpi CAPExWeb version 1.1, which stems from a GET request parameter in its servlet/capexweb.capsendMail component that allows an attacker to implement SQL injection...

PT-2022-8692 · Unknown · Shilpi Capexweb

Name of the Vulnerable Software and Affected Versions: Shilpi CAPExWeb version 1.1 Description: The issue allows SQL injection via a servlet/"capexweb.cap sendMail" GET request. This can potentially be exploited to extract or modify sensitive data. Recommendations: For Shilpi CAPExWeb version 1.1...

Capexweb 1.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...

cApexWEB 1.1 CSRF Vulnerability (Change Password Admin)

Exploit for php platform in category web applications cApexWEB 1.1 CSRF Vulnerability Change Password Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Dork : inurl:"cApexWEB" === Exploit === cApexWEB 1.1 Change Password...

CVE-2011-5031

Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 dfuserid and 2 dfpassword parameters. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 dfuserid and 2 dfpassword parameters. NOTE: some of these details are obtained from third party information...

CVE-2011-5031

Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 dfuserid and 2 dfpassword parameters. NOTE: some of these details are obtained from third party information...

CVE-2011-5031

CVE-2011-5031 describes multiple SQL injection vulnerabilities in the servlet/capexweb.parentvalidatepassword routine of cApexWEB 1.1 . The defects allow remote attackers to inject arbitrary SQL through the parameters dfuserid and dfpassword , potentially compromising data confidentiality and int...

PT-2011-5178

Name of the Vulnerable Software and Affected Versions cApexWEB version 1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the dfuserid and dfpassword parameters in the servlet/capexweb.parentvalidatepassword. Recommendations For cApexWEB...

CVE-2011-5031: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 dfuserid and 2 dfpassword parameters. NOTE: some of these details are obtained from third party information...

Capexweb universal password-vulnerability warning-the black bar safety net

Title: Capexweb Sql Vulnerable Author: D1rt3 Dud3 Affected version: 1.1 A description of the problem: Capexweb is a Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc. http://www.badguest.cn /capexweb/capexweb/ Log in details: Username:...