EUVD-2020-16713

Malware in sbrugna...

EUVD-2020-16709

Malware in sbrugna...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

Cross site scripting

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

Sql injection

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23977

CVE-2020-23977 affects KandNconcepts Club CMS 1.1 and 1.2, with cross-site scripting via the id parameter in team.php, player.php, and club.php. The root cause is unsanitized input used in these parameters, enabling XSS. Public details in connected documents confirm the vulnerability, but no expl...

CVE-2020-23973

The CVE-2020-23973 entry affects KandNconcepts Club CMS versions 1.1 and 1.2, where SQL Injection is caused by unsanitized input in the id parameter of team.php, player.php, and club.php. Root cause: improper handling/validation of user-supplied id values leading to SQL injection. Documented impa...

CVE-2020-23973

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

CVE-2020-23973: Improper Neutralization of Special Elements used in an SQL Command

KandNconcepts Club CMS 1.1 and 1.2 has SQL Injection via the 'team.php,player.php,club.php' id parameter...

PT-2020-15608

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns SQL Injection, which can be exploited via the id parameter in the 'team.php', 'player.php', and 'club.php' files. Recommendations For versions 1.1 and 1.2, avoid...

PT-2020-6754

Name of the Vulnerable Software and Affected Versions KandNconcepts Club CMS versions 1.1 through 1.2 Description The issue concerns a cross-site scripting problem via the id parameter in the team.php, player.php, and club.php scripts. This occurs due to inadequate protection of the webpage...

CVE-2020-23977: Improper Neutralization of Input During Web Page Generation

KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...

KandNconcepts Club CMS 1.1 / 1.2 Cross Site Scripting / SQL Injection

Exploit Title: KandNconcepts Club CMS 1.x SQL Injection & XSS Vulnerability Google Dork:intext:"K & N Concepts Ltd" Date: 2020-03-31 Exploit Author: @ThelastVvV Vendor Homepage:https://it-it.facebook.com/kandnconcepts / kandnconcepts.co.uk Version: 1.1&1.2 Tested on: Ubuntu...