SQL injection vulnerability in the keyword parameter of KesionCMS KS.LogPoint.asp page

KesionCMS is Xiamen Kesion Software Co., Ltd. developed a set of universal station-building system. A SQL injection vulnerability exists in the keyword parameter of KesionCMS KS.LogPoint.asp page. Because the background page KS.LogPoint.asp does not strictly filter the parameter keyword, an...

Digital Forensics Platform: Autopsy

Digital Forensics Platform Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It is used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from...

SQL Injection Vulnerability in Zhimei Cloud Management System of Henan Qingfeng Network Technology Co.

Zhimei cloud management system is a set of station management system developed by Henan Qingfeng Network Technology Co. There is a SQL injection vulnerability in the Zhimei Cloud Management System of Henan Qingfeng Network Technology Co. The vulnerability is due to the product/sousuo?key= paramet...

xycms manage_book.php page parameters keyword injection vulnerability

No description provided by source...

SQL Injection Vulnerability in the Keyword Parameter of Keyword Module of SMiCMS Government Website System

SMi CMS Government Website System is a website system for governments, schools and groups. A SQL injection vulnerability exists in the keyword parameter of the opinion solicitation module of the SMiCMS government website system. Due to insufficient filtering of the parameter, an attacker can...

SQL injection vulnerability in keyword parameter of xycms manage_book.php page

XYCMS was formerly known as Nanjing XYCMS Enterprise Building System. A SQL injection vulnerability exists in the keyword parameter of the xycms managebook.php page. The vulnerability stems from the failure to filter the keyword parameter sufficiently, which can be exploited by an attacker to...

SQL Injection Vulnerability in Keyword Parameter of School Website Management System

The SchoolWise School Website Management System is a content management system for primary and secondary school websites. A SQL injection vulnerability exists in the Keyword parameter of the School Worry-Free School Website Management System. It allows attackers to exploit the vulnerability to...

Reflected Cross-Site Scripting Vulnerability in 'keyword' Parameter of Qibo B2B Commerce System

Qibo B2B business system is an open source content management system . Qibo B2B Commerce System 'keyword' parameter reflects cross-site scripting vulnerability. Allows attackers to insert XSS execution code into web forms, there are phishing attacks, user cookie theft and other security risks...

Opensource Classified Ads Script - 'keyword' SQL Injection

Exploit Title: Opensource Classified Ads Script - SQL Injection Google Dork: N/A Date: 29.03.2017 Vendor Homepage: http://www.2daybiz.com/ Software: http://www.professionalclassifiedscript.com/downloads/opensource-classified-ads-script-2/ Demo: http://198.38.86.159/classic/ Version: N/A Tested on...

qoo10.my XSS vulnerability

Vulnerable URL: https://www.qoo10.my/s/SCRIPT-SVG-ONLOAD-CONFIRM-OPENBUGBOUNTY?keyword='--!'...

qoo10.cn XSS vulnerability

Vulnerable URL: https://www.qoo10.cn/s/SCRIPT-SVG-ONLOAD-CONFIRM-OPENBUGBOUNTY?keyword='--!'...

SQL Injection Vulnerability in cid and keyword parameters of KenCMS V1.1 Enterprise Membership Experience Edition System

KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'cid' and 'keyword' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the database...

binakonstruksi.pu.go.id XSS vulnerability

Vulnerable URL: http://binakonstruksi.pu.go.id/v2/portal2/user/view.php?keyword=bpsprov=bpskabkota=balai===bidang=3kualifikasi==klasifikasi==pelatihanuserview=10prov=balai===Cipta Karya⊂=pelatihanprompt/OPENBUGBOUNTY/...

omeganationalproducts.com XSS vulnerability

Vulnerable URL: http://www.omeganationalproducts.com/php/products.php?keyword=aasa"alert/OPENBUGBOUNTY/...

Malicious Code Vulnerability Due To Allowing Access To Mutable Objects

gateway is vulnerable to a malicious code vulnerability. The vulnerability exists because it is allowing access to mutable objects by not using final keyword appropriately in the code...

Do You See What I CCM?

SCCM Software Metering Reviewing forensic keyword searches can be confusing because it is often difficult for an analyst to determine the source of the various structures that contain string matches. One such structure belongs to Microsoft's System Center Configuration Manager's SCCM software...

Xfinity Gateway - Cross-Site Request Forgery

Xfinity Gateway - Cross-Site Request Forgery EXPLOIT TITLE: CSRF RCE XFINITY WEB GATEWAY AUTHOR: Pabstersac DATE: 1ST OF AUGUST 2016 CVE: N/A CATEGORY: REMOTE CONTACT: [email protected] IF ANYONE HAS COMMUNICATION WITH VENDOR PLEASE NOTIFY THEM SINCE THEY HAVE IGNORED ME. CSRF FOR COMCAST...

WordPress Plugin KBoard /wp-content/plugins/kboard/board.php parameters keyword XSS vulnerability

No description provided by source...

Subversion 1.6.6 / 1.6.12 Code Execution

This is an exploit for the subversion vulnerability published as CVE-2013-2088. Author: GlacierZ0ne [email protected] Exploit Type: Code Execution Access Type: Authenticated Remote Exploit Prerequisites: svn command line client available, subversion server exposes webdav through apache,...

Subversion 1.6.6 / 1.6.12 - Code Execution

Exploit for linux platform in category remote exploits This is an exploit for the subversion vulnerability published as CVE-2013-2088. Author: GlacierZ0ne email protected Exploit Type: Code Execution Access Type: Authenticated Remote Exploit Prerequisites: svn command line client available,...