CVE-2024-3222 SourceCodester PHP Task Management System admin-password-change.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

CVE-2024-3222 SourceCodester PHP Task Management System admin-password-change.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

CVE-2024-3222: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

PT-2018-14237

Name of the Vulnerable Software and Affected Versions BTITeam XBTIT version 2.5.4 Description An issue was discovered in the software, where the returnto parameter of the "account change.php" endpoint is vulnerable to an open redirect. Recommendations For version 2.5.4, avoid using the returnto...

CVE-2008-6665

change.php in Ananta CMS 1.0b5, with magicquotesgpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection...

CVE-2008-6665

change.php in Ananta CMS 1.0b5, with magicquotesgpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection...

CVE-2008-6665

The CVE-2008-6665 entry concerns Ananta CMS 1.0b5 where the script change.php is affected when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to gain administrator privileges by supplying a crafted email parameter, with the root cause described as potentially related to c...

CVE-2008-6665: Improper Control of Generation of Code

change.php in Ananta CMS 1.0b5, with magicquotesgpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection...

Anata CMS 1.0b5 - change.php Arbitrary Add Admin

Anata CMS 1.0b5 - change.php Arbitrary Add Admin =============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2006-6580

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6580: Undefined Security Weakness

admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6518

Multiple cross-site scripting XSS vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 pseudo, 2 email, 3 date, 4 sujet, 5 message, 6 site, and 7 lien parameters to a admin/change.php, and the 8 aa parameter to b lire-avis.php...

CVE-2006-6518: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 pseudo, 2 email, 3 date, 4 sujet, 5 message, 6 site, and 7 lien parameters to a admin/change.php, and the 8 aa parameter to b lire-avis.php...

CVE-2006-4530: Undefined Security Weakness

Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php...