restauranttester.at XSS vulnerability

Open Bug Bounty ID: OBB-571751 Description| Value ---|--- Affected Website:| restauranttester.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-18093

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall School Management Script version 3.0.4 Description The issue exists due to SQL Injection in the Username and Password fields. This can be exploited via the /parents/Parent module/parent login.php endpoint, specifically through...

evodragon.net XSS vulnerability

Open Bug Bounty ID: OBB-567759 Description| Value ---|--- Affected Website:| evodragon.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rebeca.ir XSS vulnerability

Open Bug Bounty ID: OBB-565016 Description| Value ---|--- Affected Website:| rebeca.ir Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...

accounts.zaretti.com XSS vulnerability

Open Bug Bounty ID: OBB-556146 Description| Value ---|--- Affected Website:| accounts.zaretti.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

anlp.org XSS vulnerability

Open Bug Bounty ID: OBB-556138 Description| Value ---|--- Affected Website:| anlp.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dialostandfound.com XSS vulnerability

Open Bug Bounty ID: OBB-556137 Description| Value ---|--- Affected Website:| dialostandfound.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cndoil.ca XSS vulnerability

Open Bug Bounty ID: OBB-554696 Description| Value ---|--- Affected Website:| cndoil.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

infomed.ch XSS vulnerability

Open Bug Bounty ID: OBB-552096 Description| Value ---|--- Affected Website:| infomed.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Authentication flaw

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2011-4069

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...

CVE-2011-4068

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2011-4068

PacketFence before 3.0.2 is affected by an authentication bypass in the check_password function (html/admin/login.php). An unauthenticated remote attacker can bypass login with an empty password, gaining access to the system. Multiple sources reference PacketFence

PT-2018-4034

Name of the Vulnerable Software and Affected Versions PacketFence versions prior to 3.0.2 Description The issue allows remote attackers to bypass authentication. This is possible due to the check password function in html/admin/login.php allowing an empty password. Recommendations For versions...

PT-2018-4035

Name of the Vulnerable Software and Affected Versions PacketFence versions prior to 3.0.2 Description The issue allows remote attackers to conduct LDAP injection attacks, which can lead to authentication bypass via a crafted username. This is related to the html/admin/login.php file...

CVE-2011-4068: Improper Authentication

The checkpassword function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authentication via an empty password...

CVE-2011-4069: Improper Neutralization of Special Elements used in an LDAP Query

html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and consequently bypass authentication via a crafted username...

CVE-2018-5979

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

CVE-2018-5979: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in Wchat Fully Responsive PHP AJAX Chat Script 1.5 via the login.php User field...

PT-2018-17265

Name of the Vulnerable Software and Affected Versions: Wchat Fully Responsive PHP AJAX Chat Script version 1.5 Description: The issue exists due to SQL Injection in the login.php file, specifically via the User field. This allows for potential exploitation. Recommendations: For Wchat Fully...