24 matches found
Instacart: shopper login_code's can be brute forced
Hi, I didn't see in the scope of your program, but it is a security weakness, so you must know this. If you don't care about shoppers' accounts then you can just mark this report as informative. First I tried to register a shopper account at https://shoppers.instacart.com/ Used a fake email addre...
Debian DSA-1514-1 : moin - several vulnerabilities
Several remote vulnerabilities have been discovered in MoinMoin, a Python clone of WikiWiki. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-2423 A cross-site-scripting vulnerability has been discovered in attachment handling. - CVE-2007-2637 Access...
DSA-1514-1 moin
Bulletin has no description...
Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection
Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection source: https://www.securityfocus.com/bid/16544/info Whomp! Real Estate Manager is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...