1659 matches found
Netartmedia Event Portal 2.0 - 'Email' SQL Injection
Exploit Title: Netartmedia Event Portal 2.0 - 'Email' SQL Injection Date: 19.03.2019 Exploit Author: Ahmet Ümit BAYRAM Vendor Homepage: https://www.netartmedia.net/eventportal/ Demo Site: https://www.phpscriptdemos.com/events/ Version: 2.0 Tested on: Kali Linux CVE: N/A Description: Event Portal ...
CVE-2018-19469
ArticleCMS through 2017-02-19 has XSS via the /updatepersonalinfomation realname or email parameter...
SeaCMS cross-site scripting vulnerability (CNVD-2019-08330)
SeaCMS Ocean CMS is a professional open source free PHP film and television system. A stored cross-site scripting vulnerability exists in SeaCMS 6.6.4, which can be exploited by an attacker during a password change via the member.php?action=chgpwdsubmit email parameter...
CVE-2018-19350
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...
Microsoft Windows Server ADFS Server-Side Request Forgery Vulnerability
Microsoft Active Directory Federation Services ADFS is an Active Directory Federation Service from Microsoft. The service provides Web Single Sign-On SSO technology, which enables authentication of a user to multiple websites or applications during a single session. A server-side request forgery...
CVE-2018-16794
Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...
IBM: Reflected XSS and Blind out of band command injection at subdomain dstuid-ww.dst.ibm.com
I found an XSS and Blind OS based injection issue due to the incorrect handling of the characters in THE EMAIL get& post parameters. A injected and a sleep command succesfully executed, the following link works as a PoC that alerts the string in the script: I reproduced the same on Firefox and IE...
MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection
Exploit Title: MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection Date: 2018-05-23 Software https://www.softneta.com/products/meddream-pacs-server/downloads.html Version: MedDreamPACS Premium 6.7.1.1 Exploit Author: Carlos Avila Google Dork: inurl:Pacs/login.php, inurl:pacsone...
Softneta MedDream PACS Server Premium 6.7.1.1 SQL Injection
Exploit Title: MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection Date: 2018-05-23 Software https://www.softneta.com/products/meddream-pacs-server/downloads.html Version: MedDreamPACS Premium 6.7.1.1 Exploit Author: Carlos Avila Google Dork: inurl:Pacs/login.php, inurl:pacsone...
Barracuda Cloud Control 7.1.1.003 Cross Site Scripting
Document Title: =============== Barracuda Cloud Control 7.1.1.003 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1992 Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID:...
refer.travelzoo.com XSS vulnerability
Open Bug Bounty ID: OBB-648629 Description| Value ---|--- Affected Website:| refer.travelzoo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Extole Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15618)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the Support Portal method in Quest DR Series Disk Backup Software before 4.0.3.1. An attacker can exploit this vulnerability to achieve command injection via the 'email' parameter...
Design/Logic Flaw
An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php?m=member&v=register URI...
CVE-2018-10391
An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php?m=member&v=register URI...
CVE-2018-10391
An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php?m=member&v=register URI...
CVE-2018-10391
An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php?m=member&v=register URI...
CVE-2018-10391
CVE-2018-10391 affects WUZHI CMS 4.1.0. The issue is a cross-site scripting (XSS) vulnerability via the email parameter in the URL index.php?m=member&v=register. This allows injection of arbitrary HTML/JS in the vulnerable context. Connected sources confirm the affected component and the vulnerab...
WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-08949)
WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject arbitrary Web script or HTML by sending the 'email' parameter ...
PT-2018-9865 · Wuzhi · Wuzhi Cms
Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: An issue was discovered that allows for XSS via the email parameter to the "index.php?m=member&v=register" URI. Recommendations: For WUZHI CMS version 4.1.0, avoid using the email parameter in the...