Vianeos OctoPUS SQL injection vulnerability

Vianeos OctoPUS is a video service middleware system developed by the French company Vianeos. Version 5 of Vianeos OctoPUS contains a SQL injection vulnerability. This vulnerability stems from a time-based blind SQL injection in the loginuser parameter, which may lead to information leakage...

CVE-2021-47801 Vianeos OctoPUS 5 - 'login_user' SQLi

Vianeos OctoPUS 5 contains a time-based blind SQL injection vulnerability in the 'loginuser' parameter during authentication requests. Attackers can exploit this vulnerability by crafting malicious POST requests with specially constructed SQL payloads that trigger database sleep functions to...

EUVD-2009-1484

Malware in sbrugna...

Vianeos OctoPUS 5 SQL Injection

Exploit Title: Vianeos OctoPUS 5 - 'loginuser' SQLi Date: 01/07/2021 Exploit Author: Audencia Business SCHOOL Vendor Homepage: http://www.vianeos.com/en/home-vianeos/ Software Link: http://www.vianeos.com/en/octopus/ Version: V5 Tested on: Fedora / Apache2 / MariaDB Octopus V5 SQLi The "loginuser...

CVE-2009-1487: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...