Cross site request forgery (csrf)

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

CVE-2017-14765

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

CVE-2017-14765

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

CVE-2017-14753

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to module/modulefilters/index.php...

CVE-2017-14753

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to module/modulefilters/index.php...

PT-2017-13668

Name of the Vulnerable Software and Affected Versions EyesOfNetwork version 5.1-0 Description A cross-site scripting XSS issue exists in the EyesOfNetwork web interface, allowing remote authenticated users to inject arbitrary web script or HTML. This is achieved by manipulating the filter paramet...

CVE-2017-14753: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to module/modulefilters/index.php...

GeniXCMS gxadmin/index.php file cross-site scripting vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in the gxadmin/index.php file in MetalGenix GeniXCMS version...

CVE-2017-14765: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...

PT-2017-13679

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.1.4 Description The issue concerns an XSS vulnerability. It can be triggered via the Menu ID field in a "page=menus" request to the "gxadmin/index.php" endpoint. Recommendations For GeniXCMS version 1.1.4, as a temporary...

CVE-2017-14760: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in /includes/event-management/index.php in the event-espresso-free aka Event Espresso Lite plugin v3.1.37.12.L for WordPress via the recurrenceid parameter to /wp-admin/admin.php...

GSA Bounty: SSRF/XSPA in labs.data.gov/dashboard/validate

Hi. This vulnerability allows access to all ports locally. Which is not visible from the web. 1We need an interim site file index.php 2Next we write in index.php 3Next go to https://labs.data.gov/dashboard/validate And write url - for example http://example/index.php If the port will be open...

PT-2017-13639

Name of the Vulnerable Software and Affected Versions DenyAll WAF versions 5.5.0 through 5.5.12 DenyAll WAF version 5.6 DenyAll WAF version 5.7 DenyAll WAF versions 6.x before 6.4.1 Description The issue allows unauthenticated remote attackers to obtain authentication information by making a...

CVE-2014-9611

Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php...

pirtys.lt XSS vulnerability

Vulnerable URL: http://www.pirtys.lt/index.php?kaina=%5B%27%27%5D=%5B%27Ie%5Cxc5%5Cxa1koti%27%5D=%5B%27%27%5D=%5B%27%27%5D=%5B%27%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.12.2017...

CVE-2014-9611: Improper Authentication

Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php...

PT-2017-6372

Name of the Vulnerable Software and Affected Versions Netsweeper versions prior to 4.0.5 Description The issue allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to "webadmin/nslam/index.php". Recommendations For versions prior to 4.0.5, upda...

CVE-2017-14405

The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...

CVE-2017-14405: Improper Neutralization of Special Elements used in an OS Command

The EyesOfNetwork web interface aka eonweb 5.1-0 allows remote command execution via shell metacharacters in a hostscacti array parameter to module/admindevice/index.php...

PT-2017-13448

Name of the Vulnerable Software and Affected Versions EyesOfNetwork web interface aka eonweb versions 5.1-0 Description The issue allows remote command execution via shell metacharacters in a hosts cacti array parameter to the "module/admin device/index.php" API endpoint. Recommendations For...