13416 matches found
Fiyo-cms 2.018 /dapur/index.php SQL注入漏洞
漏洞链接： http://localhost/fiyo/dapur/index.php?app=user&act=edit&id=1sqli Parameter: id Type: UNION query Title: MySQL UNION query NULL - 10 columns Payload: app=user&act=edit&id=-1874 UNION ALL SELECT NULL,NULL,CONCAT0x7171676471,0x66457070464452786c58,0x716a767471,NULL,NULL,NULL,NULL,NULL,NULL,NUL...
CVE-2012-4901: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themeseditor parameter in an addtemplate action to admin/index.php...
PT-2015-3530
Name of the Vulnerable Software and Affected Versions Template CMS versions 2.1.1 and earlier Description The issue allows remote attackers to hijack the authentication of administrators for requests. This can be done in two ways: 1 by creating an administrator user via an "add" action to...
CVE-2012-4902: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 create an administrator user via an add action to admin/index.php or 2 conduct static PHP code injection attacks via...
FineCMS v2.3.5 /member/index.php SQL注入漏洞
No description provided by source...
CVE-2015-2250
Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...
WordPress WP Photo Album Plus Plugin <= 4.9.2 - XSS
This plugin is prone to index.php wppa-tag parameter cross site scripting vulnerability. Solution Update the plugin...
WordPress WooCommerce Predictive Search Plugin <= 1.0.5 - XSS
This plugin is prone to a cross site scripting vulnerability in index.php rs parameter. Solution Update the plugin...
WordPress xili-language Plugin <= 2.8.5 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in index.php lang parameter. Solution Update the plugin...
CVE-2015-2250: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the 1 bannedword parameter to index.php/dashboard/system/conversations/bannedwords/success, 2 channel parameter to index.php/dashboard/reports/logs/view, 3...
Sql injection
Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 userpass parameter in gologin.php or the PATHINFO to 3 gologin/validatecredentials/admin/ or 4 index.php/gosite/gogetuserinfo/...
Pragyan 3.0 /index.php SQL注入漏洞
No description provided by source...
ProjectSend r561 Multiple Vulnerabilities
ProjectSend version r561 suffers from cross site request forgery, cross site scripting, and remote shell upload vulnerabilities. + Author: TUNISIAN CYBER + Title: ProjectSend r561 Multiple Vulnerabilities + Date: 25-04-2015 + Vendor: http://www.projectsend.org/ +...
ProjectSend r561 CSRF / XSS / Shell Upload
Author: TUNISIAN CYBER + Title: ProjectSend Multiple Vulnerabilities + Date: 25-04-2015 + Vendor: http://www.projectsend.org/ + Download:http://www.projectsend.org/download/67/ + Type: WebAPP + Tested on: KaliLinux Debian + Twitter: @TCYB3R It's a long one so let's start... I/ CSRF: Add Admin...
CVE-2012-2930: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in TinyWebGallery TWG before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an adduser action to admin/index.php or 2 conduct static PHP code injection attacks in .htusers.php...
PT-2015-3524
Name of the Vulnerable Software and Affected Versions TinyWebGallery versions prior to 1.8.8 Description The issue allows remote attackers to hijack the authentication of administrators for requests. This can be done in two ways: by adding a user via an "adduser" action to "admin/index.php" or by...
CVE-2012-2932: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in TinyWebGallery TWG before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems parameter in a 1 copy, 2 chmod, or 3 arch action to admin/index.php or 4 searchitem parameter in a search action to admin/index.php...
CVE-2014-9146
Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the 1 view, 2 id, 3 page, or 4 app parameter to the default URI or the 5 act parameter to dapur/index.php...