ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in ManageEngine Firewall Analyzer 7.2 allow remote attackers to inject arbitrary web script or HTML via the 1 subTab or 2 tab parameter to createAnomaly.do; 3 url, 4 subTab, or 5 tab parameter to mindex.do; 6 tab parameter to index2.do; or 7 port...

📄 Bloodbank CMS 1.0 SQL Injection

Bloodbank CMS version 1.0 suffers from a remote SQL injection vulnerability. ================================================================================================================================== | Title : bloodbank cms v1.0 sql injection vulnerability | | Author : indoushka | | Teste...

CVE-2026-11471

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made publi...

CVE-2026-11471

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made publi...

EUVD-2026-35002

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made publi...

CVE-2026-11471: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /index2.php. The manipulation of the argument Password results in sql injection. It is possible to launch the attack remotely. The exploit has been made publi...

EUVD-2012-3999

Malware in sbrugna...

Genexis Platinum-P4410-V2 cgi-bin/index2.asp Authentication Information Disclosure

The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to obtain authentication credentials necessary to access the router...

CVE-2020-6170

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

PT-2020-1429

Name of the Vulnerable Software and Affected Versions Genexis Platinum-P4410-V2 versions 1.28 and earlier Genexis Platinum-4410 versions 2.1 and earlier Description The issue is related to insufficient authentication in the cgi-bin/index2.asp component of the Genexis Platinum-P4410-V2 and Genexis...

CVE-2020-6170: Exposure of Sensitive Information to an Unauthorized Actor

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

CVE-2018-8721: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen...

PT-2018-18599

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 Description The issue is related to Stored XSS and is associated with the index2.do?url=editAlertForm&tab=alert&alert=profile URI and the Edit Alert Profile screen. Recommendations F...

raster.se XSS vulnerability

Vulnerable URL: http://www.raster.se/Index2.asp?from=Handla="'; Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 3 VIP website status:| No...

PT-2014-6214

Name of the Vulnerable Software and Affected Versions ManageEngine EventLog Analyzer versions prior to 9.0 build 9002 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via various...

CVE-2014-4930: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in event/index2.do in ManageEngine EventLog Analyzer before 9.0 build 9002 allow remote attackers to inject arbitrary web script or HTML via the 1 width, 2 height, 3 url, 4 helpP, 5 tab, 6 module, 7 completeData, 8 RBBNAME, 9 TC, 10 rtype, 11...

webl?sninger <= 4 - (xss/sql) Multiple Vulnerabilities

No description provided by source. Viva IsLaM sql / xss Multiple Vulnerabilities weblosning V1, V2,V3,V4 index2.php id Script Name : Weblosning V1, V2,V3,V4 Demo : http://www.simpelside.dk/ AuTh0r: Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] V1 ::V2 :: V3 :: V4 D0rk : allinurl:...

Elxis CMS 2009.2 - Remote file include vulnerbility

No description provided by source. \ \ \ / / / \ / / / |// / / // // / / / // // / // // / // // / //|| priasantai.uni.cc | team-elite.us elxis2009.2electrarev2631 === multiple Remote File Include Author : n0n0x Homepage: http://priasantai.uni.cc/ Download script :...

interuse Website Builder & design (index2.php) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- interuse Website Builder & design index2.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Autho...

Webee Comments Component 1.1/1.2 for Joomla! index2.php articleId SQL Injection

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '86842' ssvid version = '1.0' author = 'kikay' vulDate = '2010-02-22' createDate ...