8 matches found
CVE-2024-3222 SourceCodester PHP Task Management System admin-password-change.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...
CVE-2024-3222 SourceCodester PHP Task Management System admin-password-change.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester PHP Task Management System 1.0. This issue affects some unknown processing of the file admin-password-change.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...
CVE-2008-6665
change.php in Ananta CMS 1.0b5, with magicquotesgpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection...
CVE-2008-6665
change.php in Ananta CMS 1.0b5, with magicquotesgpc disabled, allows remote attackers to gain administrator privileges via a crafted email parameter, possibly related to code injection...
CVE-2008-6665
The CVE-2008-6665 entry concerns Ananta CMS 1.0b5 where the script change.php is affected when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to gain administrator privileges by supplying a crafted email parameter, with the root cause described as potentially related to c...
Anata CMS 1.0b5 - change.php Arbitrary Add Admin
Anata CMS 1.0b5 - change.php Arbitrary Add Admin =============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
CVE-2006-6580
admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2006-6518
Multiple cross-site scripting XSS vulnerabilities in ProNews 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 pseudo, 2 email, 3 date, 4 sujet, 5 message, 6 site, and 7 lien parameters to a admin/change.php, and the 8 aa parameter to b lire-avis.php...