CVE-2015-3179

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...

CVE-2015-3179: Undefined Security Weakness

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...

CVE-2015-3176: Exposure of Sensitive Information to an Unauthorized Actor

The account-confirmation feature in login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote attackers to obtain sensitive full-name information by attempting to self-register...

PT-2015-1575

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.6.11 Moodle versions prior to 2.7.8 Moodle versions prior to 2.8.6 Moodle version 2.5.9 Description The issue is related to the account-confirmation feature in the login/confirm.php component, which lacks protection ...

PT-2015-1578

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.5.10 Moodle versions 2.6.x through 2.6.10 Moodle versions 2.7.x through 2.7.7 Moodle versions 2.8.x through 2.8.5 Description The issue is related to insufficient access control in the login/confirm.php component of...

CVE-2014-2008

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

PT-2014-4428

Name of the Vulnerable Software and Affected Versions PrestaShop mPAY24 payment module versions prior to 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the TID parameter in the confirm.php file. Recommendations For PrestaShop mPAY24 payme...

CVE-2014-2008: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in confirm.php in the mPAY24 payment module before 1.6 for PrestaShop allows remote attackers to execute arbitrary SQL commands via the TID parameter...

File Store PRO 3.2 - Multiple Blind SQL Injection Vulnerabilities

No description provided by source. | File Store PRO 3.2 Blind SQL Injection | || Download from: http://upoint.info/cgi/demo/fs/filestore.zip - Need admin rights: /confirm.php: code ifisset$GETfolder && $GETfolder!= $folder=$GETfolder; else exitBad Request; ifisset$GETid && $GETid!= $id=$GETid; el...

CVE-2012-3872

CVE-2012-3872 affects Open Constructor 3.12.0. The vulnerability is a set of reflected XSS flaws in which user-supplied input can be injected via three parameters: (1) result in data/file/edit.php, (2) q in confirm.php, and (3) keyword in users/users.php. Exploitation would allow remote attackers...

PT-2012-5055

Name of the Vulnerable Software and Affected Versions Open Constructor version 3.12.0 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several parameters, including the result...

CVE-2012-3872: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Open Constructor 3.12.0 allow remote attackers to inject arbitrary web script or HTML via 1 the result parameter to data/file/edit.php, 2 the q parameter to confirm.php, or 3 the keyword parameter to users/users.php...

CVE-2010-4873

Cross-site scripting XSS vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

PT-2011-1808

Name of the Vulnerable Software and Affected Versions WeBid version 0.8.5 P1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in the "confirm.php" file. Recommendations For WeBid version 0.8.5 P1, avoid using the id...

CVE-2010-4873: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Netpet CMS <= 1.9 Directory Traversal Vulnerability

Netpet CMS is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:netpet:netpetcms";...

CVE-2009-4723

Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

Directory traversal

Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2009-4723: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

Netpet CMS 1.9 (confirm.php language) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Netpet CMS 1.9 confirm.php language Local File Inclusion Vulnerability ======================================================================== + Netpet CMS 1.9...