CVE-2018-25152

CVE-2018-25152 affects Ecessa Edge EV150 10.7.4. A cross-site request forgery allows unauthenticated attackers to add superuser accounts by crafting a page that submits to /cgi-bin/pl_web.cgi/util_configlogin_act. The connected sources confirm the vulnerable component, the endpoint, and the impac...

CVE-2018-19468: Improper Neutralization of Special Elements used in an SQL Command

HuCart 5.7.4 has SQL injection in getip in system/class/helperclass.php via the X-Forwarded-For HTTP header to the user/index.php?load=login&act=actlogin URI...

Call Of Duty Cross Site Scripting

Exploit Title: callofduty xss Date: 13.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php https://profile.callofduty.com/p/login.act?redirectUrl=XSS "; alert"TayfunBasoglu";" https://profile.callofduty.com/p/login.act?redirectUrl= "; alert"TayfunBasoglu";"...