PT-2017-12683

Name of the Vulnerable Software and Affected Versions Question2Answer versions prior to 1.7.5 Description The issue allows remote attackers to create multiple user accounts by exploiting a flaw in the qa-include/qa-install.php file. Recommendations For versions prior to 1.7.5, update to version...

CVE-2017-12061

CVE-2017-12061 affects MantisBT installations via admin/install.php, with XSS caused by unsanitized user-controlled variables in the installer (notably $f_database, $f_db_username, $f_admin_username). Vulnerable versions are MantisBT < 1.3.12 and

CVE-2017-12061

An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation script are not properly sanitized before being output, allowing remote attackers to inject arbitrary JavaScript code, as demonstrated by...

CVE-2017-12061: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation script are not properly sanitized before being output, allowing remote attackers to inject arbitrary JavaScript code, as demonstrated by...

Cross-site Scripting (XSS)

silverstripe/framework is vulnerable to cross-site scripting XSS attacks. Using the adminusername or the adminpassword parameters in install.php, attackers can inject web script or HTML...

AContent CMS 1.3 Cross Site Scripting

|||||||||||||||||||||||||||||||||||||||||| |=============================================================| |+ Exploit Title:A Cross Site Scripting in AContent Content Management System |+ |+ Exploit Author: Ashiyane Digital Security Team |+ |+ Download Link :...

Dswjcms3. 2. 1 install.php repeat the installation

No description provided by source...

B2Bbuilder v7.0.1 install.php 设计缺陷可无限制getshell

0x01漏洞简介 B2Bbuilder v7.0.1 在文件install.php处存在一个设计缺陷，导致可无限制getshell。 0x02漏洞详情 /install/install.php if$action == "setup" //检查参数是否完整 $dbhost = $GET'dbhost'; $port = $GET'port'; $dbname = $GET'dbname'; $dbuser = $GET'dbuser'; $dbpassword = $GET'dbpassword'; $tableprefix = $GET'tableprefix'; $guid =...

shopbuilder系统 install.php 参数 weburl SQL注入漏洞

No description provided by source...

Online Airline Booking System - Multiple Vulnerabilities

Online Airline Booking System - Multiple Vulnerabilities Exploit Title : Online Airline Booking System multiple vulnerabilities Author : WICS Date : 05/1/2016 Software Link : http://sourceforge.net/projects/oabs/ Affected Version: All Overview: The Online Airline Booking System is designed to be ...

CVE-2015-7382

SQL injection vulnerability in install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009...

Sql injection

SQL injection vulnerability in install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009...

CVE-2015-7382

The connected documents confirm a SQL injection vulnerability in Web Reference Database (refbase) through version 0.9.6, exploitable via the defaultCharacterSet parameter in install.php, enabling remote execution of arbitrary SQL commands. This CVE is distinct from CVE-2015-6009 and is listed amo...

CVE-2015-6008

CVE-2015-6008 affects Web Reference Database (refbase) install.php up to version 0.9.6. A remote attacker can execute arbitrary PHP code by manipulating the adminPassword parameter, enabling remote code execution. This is a confirmed vulnerability entry with corroborating references indicating a ...

CVE-2015-7383: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Web Reference Database aka refbase through 0.9.6 and bleeding-edge through 2015-04-28 allow remote attackers to inject arbitrary web script or HTML via the 1 adminUserName, 2 pathToMYSQL, 3 databaseStructureFile, or 4 pathToBibutils parameter t...

PT-2015-7540

Name of the Vulnerable Software and Affected Versions refbase versions prior to 0.9.7 Description The issue allows remote attackers to execute arbitrary PHP code via the pathToMYSQL or databaseStructureFile parameter in the install.php file. Recommendations For versions prior to 0.9.7, update to...

CVE-2015-7382: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter, a different issue than CVE-2015-6009...

CVE-2015-7381: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database aka refbase through 0.9.6 allow remote attackers to execute arbitrary PHP code via the 1 pathToMYSQL or 2 databaseStructureFile parameter, a different issue than CVE-2015-6008...

CVE-2015-6008: Improper Neutralization of Special Elements used in an OS Command

install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381...

PT-2015-7541

Name of the Vulnerable Software and Affected Versions Web Reference Database aka refbase versions prior to 0.9.7 Description The issue allows remote attackers to execute arbitrary SQL commands via the defaultCharacterSet parameter in the "install.php" file. Recommendations For versions prior to...