CVE-2019-11233

EXCELLENT INFOTEK BiYan v1.57 v2.8 allows an attacker to leak user information without being authenticated, by sending a LOGINID element to the auth/main/asp/checkuserlogininfo.aspx URI, and then reading the response, as demonstrated by the KWEMAIL or KWTEL field...

S-CMS SQL Injection Vulnerability (CNVD-2018-26679)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Sid' parameter to the wapindex.php?type=newsinfo URL...

CVE-2018-19324

kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home&mod=mypage&page=info URI...

CVE-2018-12735

SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverterinfo.htm or englishmain.htm URI...

malco.com XSS vulnerability

Vulnerable URL: http://malco.com/cinemainfo.php?thisid=1"...

SQL injection vulnerability in the id parameter of the news_info.php file of Dongyunchuangda Enterprise CMS

Dongyun Tronda Enterprise CMS is an enterprise website building system. A SQL injection vulnerability exists in the id parameter of the newsinfo.php file of the Dongyuntranda Enterprise CMS. An attacker can exploit this vulnerability to obtain database information...

customrulers.net XSS vulnerability

Vulnerable URL: http://customrulers.net/Moreinfo.asp?equipment=1"...

radiovaticana.va XSS vulnerability

Vulnerable URL: http://www.radiovaticana.va/EN1/infoareaafrica/argomenti.asp?arg=donne==Women=argtitolo15 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 25197 VIP website status:|...

SQL Injection Vulnerability in UReader Digital Library System info.php Page

UReader Digital Library UReader Digital Library is a comprehensive platform for providing e-books in original foreign languages. A SQL injection vulnerability exists in the UReader Digital Library system info.php page. The vulnerability is caused by not filtering the 'resid' parameter effectively...

museenkoeln.de XSS vulnerability

Vulnerable URL: http://www.museenkoeln.de/Impressionismus/infoe.asp?lang=en='"--!confirmOPENBUGBOUNTY...

Boozt Fashion AB: PHP info page disclosure on http://www.day.dk/

Hi, Boozt team. Description: phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. Step to reproduce: 1. Go to http://www.day.dk/check.php An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version...

cda.pl XSS vulnerability

Vulnerable URL: http://www.cda.pl/info/--...

bouwenwonen.net XSS vulnerability

Vulnerable URL: http://www.bouwenwonen.net/info/index.asp Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 340531 Google Pagerank| 4 VIP website status:| No...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...

CVE-2011-4346

CVE-2011-4346 corresponds to an XSS flaw in the web interface of Red Hat Network Satellite 5.4.1. An authenticated RHN Satellite user could inject arbitrary script/HTML via the Description field of the asset tag in a Custom Info page. The issue is documented across multiple sources (RHSA-2011:179...

CVE-2011-4346

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...

PT-2011-4937 · Red Hat · Red Hat Network Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Network RHN Satellite version 5.4.1 Description: A cross-site scripting XSS issue exists in the web interface, allowing remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a...