2586 matches found
elaniin CMS 1.0 - Authentication Bypass
Exploit Title: elaniin CMS 1.0 - Authentication Bypass Author: riamloo Date: 2020-01-02 Vendor Homepage: https://elaniin.com/ github == https://github.com/elaniin/ Software Link: https://github.com/elaniin/CMS/archive/master.zip Version: 1 CVE: N/A Tested on: Win 10 Discription: Open-source Conte...
BloodX 1.0 SQL Injection
Exploit Title: BloodX 1.0 - Authentication Bypass Author: riamloo Date: 2019-12-31 Vendor Homepage: https://github.com/diveshlunker/BloodX Software Link: https://github.com/diveshlunker/BloodX/archive/master.zip Version: 1 CVE: N/A Tested on: Win 10 Discription: An standalone platform which lets...
CVE-2014-2214: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in POSH aka Posh portal or Portaneo 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 error parameter to /includes/plugins/mobile/scripts/login.php or 2 id parameter to portal/openrssarticle.php...
PT-2019-7084
Name of the Vulnerable Software and Affected Versions POSH versions 3.0 through 3.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the error parameter to "/includes/plugins/mobile/scripts/login.php" or the id parameter to...
CVE-2019-17430
EyouCms through 2019-07-11 has XSS related to the login.php webrecordnum parameter...
Cross site scripting
EyouCms through 2019-07-11 has XSS related to the login.php webrecordnum parameter...
CVE-2019-17430
CVE-2019-17430 affects EyouCms up to 2019-07-11. The issue is an XSS in the login.php web_recordnum parameter. The connected documents confirm the vulnerability type (XSS) and affected component (login flow) but do not provide concrete exploit vectors, affected versions beyond the date, or remedi...
CVE-2019-17430
EyouCms through 2019-07-11 has XSS related to the login.php webrecordnum parameter...
PT-2019-15151
Name of the Vulnerable Software and Affected Versions EyouCms versions prior to 2019-07-11 Description The issue is related to a Cross-Site Scripting XSS problem. It affects the web recordnum parameter in the login.php file. Recommendations For EyouCms versions prior to 2019-07-11, avoid using th...
CVE-2019-17430: Improper Neutralization of Input During Web Page Generation
EyouCms through 2019-07-11 has XSS related to the login.php webrecordnum parameter...
PT-2019-15108
Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the member login.php parameter in the tpl.php file. Recommendations For S-CMS version 1.5,...
CVE-2019-16392: Improper Neutralization of Input During Web Page Generation
SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages...
Sql injection
FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...
CVE-2019-16309
FlameCMS 3.3.5 has an SQL injection in account/login.php via the accountName parameter. The root cause is a lack of input validation for SQL statements in a database-backed application, enabling an attacker to execute arbitrary SQL commands. This CVE (CVE-2019-16309) is corroborated by multiple s...
PT-2019-14618
Name of the Vulnerable Software and Affected Versions FlameCMS version 3.3.5 Description The issue concerns SQL injection in the account/login.php file via the accountName variable. Recommendations For FlameCMS version 3.3.5, update to a version that fixes the SQL injection issue in...
CVE-2019-16309: Improper Neutralization of Special Elements used in an SQL Command
FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...
CVE-2019-15826
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...
CVE-2019-15826
The wps-hide-login plugin before 1.5.3 for WordPress has a protection bypass via wp-login.php in the Referer field...
PT-2019-14415
Name of the Vulnerable Software and Affected Versions wps-hide-login plugin versions prior to 1.5.3 Description The issue allows for protection bypass via the "wp-login.php" page, specifically through manipulation of the Referer field. Recommendations For versions prior to 1.5.3, update to versio...