PT-2017-12219

Name of the Vulnerable Software and Affected Versions MODX Revolution version 2.5.7 Description The issue concerns the System Settings module, where the key and name parameters are susceptible to XSS attacks. When a malicious payload is sent to the "connectors/index.php" endpoint, it will be...

Friends In War Make Or Break 1.7 SQL Injection

Exploit Title: Friends in War Make or Break 1.7 SQL Injection Dork: N/A Date: 26.07.2017 Vendor : http://software.friendsinwar.com/ Software: http://software.friendsinwar.com/downloads.php?catid=2&fileid=9 Demo: http://localhost/PATH/ Version: 1.7 Author: Ihsan Sencan SQL Injection/Exploit :...

Access Restriction Bypass

Moodle is vulnerable to access restriction bypass. The attacks exist because mod/chat/guisockets/index.php does not check for privileges for access to a daemon-mode Chat activity, allowing a malicious user unauthorized access to daemon-mode Chat activity...

qcmd.org XSS vulnerability

Vulnerable URL: http://www.qcmd.org/index.php/index.php?pageId=3=EN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2056429 VIP website status:| No Check qcmd.org SSL connection:|...

hqcompany.com XSS vulnerability

Vulnerable URL: http://www.hqcompany.com/index.php?theme=7=1"...

safetyhow.com XSS vulnerability

Vulnerable URL: http://www.safetyhow.com/index.php/QualificationRequirementsForPollutionControlOfficerInThePhilippines?action=1"...

goolink.org XSS vulnerability

Vulnerable URL: http://www.goolink.org/index.php?mess=1"...

infob.de XSS vulnerability

Vulnerable URL: https://www.infob.de/index.php?go=on=1"...

Cross site scripting

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

CVE-2017-10667: Improper Neutralization of Input During Web Page Generation

In index.php in Zen Cart 1.6.0, the productsid parameter can cause XSS...

PT-2017-11420

Name of the Vulnerable Software and Affected Versions Zen Cart version 1.6.0 Description The issue is related to a potential XSS problem. In the index.php file, the products id parameter can cause XSS. Recommendations For Zen Cart version 1.6.0, avoid using the products id parameter in the affect...

members.peoplefu.com XSS vulnerability

Vulnerable URL: http://members.peoplefu.com/index.php?word=1/-///'/"//--...

Sql injection

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

CVE-2017-9759

The vulnerability is a SQL Injection in the open-source CMS Zenbership version 1.0.8, located in the admin/index.php handling the filters array parameter. The issue is exploitable by a privileged account, as described in CVE-2017-9759. The connected sources consistently report this exact flaw but...

PT-2017-19166

Name of the Vulnerable Software and Affected Versions Zenbership version 1.0.8 Description A SQL Injection issue exists in the admin/index.php file of Zenbership, specifically via the filters array parameter. This issue can be exploited by an attacker with a privileged account. Recommendations Fo...

IBM Informix Dynamic Server index.php testconn Heap Buffer Overflow (CVE-2017-1092)

A heap buffer overflow exists in IBM's Informix Dynamic Server and Informix Open Admin Tool. The vulnerability is due an input validation error when processing requests sent to index.php. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted request...

CVE-2017-9759: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter, exploitable by a privileged account...

Cross site scripting

In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?returnurl=XSS exploitable as a regular or admin user...

CVE-2017-9673

In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account via the index.php/user/new URI or change its settings via the index.php/user/1 URI, including its password...