Sql injection

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...

CVE-2019-19245

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...

CVE-2019-19245: Improper Neutralization of Special Elements used in an SQL Command

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...

CVE-2018-15180

qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...

CVE-2018-15180: URL Redirection to Untrusted Site

qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...

OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection

Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Date: 2018-11-05 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link: https://sourceforge.net/projects/bigchef/files/latest/download...

ocean-photo.de XSS vulnerability

Open Bug Bounty ID: OBB-683145 Description| Value ---|--- Affected Website:| ocean-photo.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

Subrion CMS 4.1.5 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications | Exploit Title: Subrion Cms Cross Site Scripting XSS | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://subrion.org/ | Software Link: https://tools.subrion.org/get/latest.zip | Version: 4.1.5 | Date: 2017 - 07 - 9 |...

CVE-2014-2710: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Oliver formerly Webshare 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the 1 login page index.php or 2 login form loginform-inc.php...

archiwum.polityka.pl XSS vulnerability

Vulnerable URL: http://archiwum.polityka.pl/sso/loginform?return=→"...

CVE-2015-1512

Multiple cross-site scripting XSS vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginFormusername to ui/system/login or the 2 order or 3 myorgs to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginFormusername to ui/system/login or the 2 order or 3 myorgs to index.php...

CVE-2015-1512: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginFormusername to ui/system/login or the 2 order or 3 myorgs to index.php...

CVE-2008-4303

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors...

CVE-2008-4303: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors...

Pre Shopping Mall Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pre Shopping Mall Insecure Cookie Handling Vulnerability ========================================================...

CVE-2006-6043: Undefined Security Weakness

PHP file inclusion vulnerability in loginform-inc.php in Oliver formerly Webshare 1.2.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the confmotdfile parameter, which is accessed by the...

CVE-2006-1495: Undefined Security Weakness

SQL injection vulnerability in general/sendpassword.php in 1 PHPCollab 2.4 and 2.5.rc3, and 2 NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option...