CVE-2018-14476: Improper Neutralization of Input During Web Page Generation

GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation...

PT-2019-9025

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.5 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is possible due to inadequate input validation in the dbuser or dbhost parameters during the installation...

CVE-2018-20937

cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...

CVE-2018-20937

cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...

Design/Logic Flaw

cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...

CVE-2018-20937

CVE-2018-20937 affects cPanel before 68.0.27, where database and dbuser names are not validated during rename operations (SEC-321). Multiple connected records (RH, CNVD, NVD, CVE lists) corroborate the same description. The vulnerability stems from insufficient validation in the rename process, p...

CVE-2018-20937

cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...

PT-2019-10371

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue concerns the lack of validation for database and dbuser names during the rename process. Recommendations: For versions prior to 68.0.27, update to version 68.0.27 or later to resolve the...

Revive Adserver Cross-Site Scripting Vulnerability (CNVD-2017-05629)

Revive Adserver is an open source advertising management system from the Revive Adserver team. The system provides ad placement, ad space management, data statistics and other functions. Revive Adserver has a cross-site scripting vulnerability. Attackers can use the dbHost or dbUser parameter to...

CVE-2016-9472

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narr...

PT-2017-10163

Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.5 Revive Adserver versions prior to 4.0.0 Description The issue concerns a reflected XSS attack. The Revive Adserver web installer scripts are vulnerable to this attack via parameters such as dbHost and...

CVE-2016-9472: Improper Neutralization of Input During Web Page Generation

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other parameters. It has to be noted that the window for such attack vectors to be possible is extremely narr...

CVE-2015-6528

Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...

CVE-2014-0894: Exposure of Sensitive Information to an Unauthorized Actor

RICOS in IBM Algo Credit Limits aka ACLM 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document...

PT-2014-3927

Name of the Vulnerable Software and Affected Versions IBM Algo Credit Limits ACLM versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5 Description The issue allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document. Recommendations...

videoDB <= 3.1.0 - SQL Injection Vulnerability

No description provided by source. DORK:allinurl:borrow.php?diskid= DORK:allintitle:videodb Vendor: http://www.videodb.net/blog/ $ ----------- | S3C0VERUN | & ------------@ along with this i was able in some sites to determine that you can overwrite the databse contents and also if you look in th...

CVE-2012-1262: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability th...

PT-2012-3174

Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 4.38 Movable Type versions 5.0x prior to 5.07 Movable Type versions 5.1x prior to 5.13 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the...