13437 matches found
CVE-2014-1631: Undefined Security Weakness
Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php...
PT-2018-4172
Name of the Vulnerable Software and Affected Versions Eventum versions prior to 2.3.5 Description The issue allows remote attackers to reinstall the application. This can be achieved by making a direct request to the "/setup/index.php" API endpoint. Recommendations For versions prior to 2.3.5,...
TSiteBuilder 1.0 - SQL Injection
Exploit Title: TSiteBuilder 1.0 - SQL Injection Dork: N/A Date: 27.01.2018 Vendor Homepage: http://www.datacomponents.net/ Software Link: http://www.datacomponents.net/products/website/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsan Sencan Author Web...
Sql injection
SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...
CVE-2018-5988
CVE-2018-5988 affects Flexible Poll 1.2. The vulnerability is a SQL Injection in the id parameter of mobile_preview.php and index.php, caused by unsafely handling user-supplied input. Impact per sources: remote attacker can inject SQL commands, with potential data exposure/integrity effects as de...
CVE-2018-5988: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in Flexible Poll 1.2 via the id parameter to mobilepreview.php or index.php...
CVE-2017-17999: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledgebase/getarticlesuggestion/...
PT-2018-6603
Name of the Vulnerable Software and Affected Versions: RISE Ultimate Project Manager version 1.9 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the search parameter in the "index.php/knowledge base/get article...
Design/Logic Flaw
CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...
CVE-2018-5961
CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...
CVE-2018-5961
CVE-2018-5961 affects CentOS Web Panel up to v0.9.8.12, where an XSS vulnerability exists via the module parameter in the index.php file. The issue is described as a Cross-Site Scripting vulnerability (non-persistent) that can lead to script execution in a victim’s browser. Public details across ...
CVE-2018-5961
CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...
CVE-2018-5961: Improper Neutralization of Input During Web Page Generation
CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the module value of the index.php file...
PT-2018-17249 · Centos · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions through v0.9.8.12 Description: The issue concerns an XSS vulnerability via the module value of the "index.php" file. Recommendations: For versions through v0.9.8.12, as a temporary workaround, consider restricting...
CVE-2018-5962: Improper Neutralization of Input During Web Page Generation
index.php in CentOS-WebPanel.com aka CWP CentOS Web Panel through v0.9.8.12 has XSS via the id parameter to the phpinieditor module or the emailaddress parameter to the mailadd-new module...
CentOS Web Panel 0.9.8.12 - Multiple Vulnerabilities
CentOS Web Panel 0.9.8.12 - Multiple Vulnerabilities Document Title: =============== CentOS Web Panel v0.9.8.12 - Multiple Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 Release Date: ============= 2018-01-19...
CentOS Web Panel 0.9.8.12 - Multiple Vulnerabilities
Document Title: =============== CentOS Web Panel v0.9.8.12 - Multiple Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1836 Release Date: ============= 2018-01-19 Vulnerability Laboratory ID VL-ID:...
CentOS Web Panel 0.9.8.12 Cross Site Scripting
Document Title: =============== CentOS Web Panel v0.9.8.12 - Non-Persistent Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1835 Release Date: ============= 2018-01-17 Vulnerability Laboratory ID VL-ID:...
CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities
Document Title: =============== CentOS Web Panel v0.9.8.12 - CS Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1835 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5961 CVE-ID: ======= CVE-2018-5961 Release Date:...