CVE-2020-14973

The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting XSS vulnerability via the query string...

CVE-2020-14973

The CVE-2020-14973 entry affects webTareas 2.0p8, specifically the loginForm in general/login.php. It is a reflected Cross-Site Scripting (XSS) vulnerability via the query string. The impact is limited to client-side code execution in a comparison to the vulnerable context; exploitation details a...

PT-2020-14099

Name of the Vulnerable Software and Affected Versions webTareas version 2.0p8 Description The issue concerns a Reflected Cross Site Scripting XSS vulnerability. This occurs via the query string in the loginForm within the general/login.php webpage. Recommendations For webTareas version 2.0p8,...

Sql injection

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...

CVE-2019-19245

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...

CVE-2019-19245: Improper Neutralization of Special Elements used in an SQL Command

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginFormusername field when double quotes are used...

CVE-2018-15180

qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...

CVE-2018-15180: URL Redirection to Untrusted Site

qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...

PT-2019-9093

Name of the Vulnerable Software and Affected Versions qTest Manager version 9.0.0 Description The issue is related to an Open Redirect in the qTest Portal of qTest Manager. This occurs via the /portal/loginform API endpoint, specifically through the redirect parameter. Recommendations For version...

PT-2018-14993

Name of the Vulnerable Software and Affected Versions EduSec versions through 4.2.6 Description The issue allows remote attackers to potentially obtain access via a brute-force approach due to the lack of restriction on sending a series of LoginFormusername and LoginFormpassword parameters to the...

OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection

Exploit Title: OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection Date: 2018-11-05 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://sourceforge.net/projects/bigchef/ Software Link: https://sourceforge.net/projects/bigchef/files/latest/download...

ocean-photo.de XSS vulnerability

Open Bug Bounty ID: OBB-683145 Description| Value ---|--- Affected Website:| ocean-photo.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15958

D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php...

Subrion CMS 4.1.5 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications | Exploit Title: Subrion Cms Cross Site Scripting XSS | Exploit Author: Ashiyane Digital security Team | Vendor Homepage : https://subrion.org/ | Software Link: https://tools.subrion.org/get/latest.zip | Version: 4.1.5 | Date: 2017 - 07 - 9 |...

CVE-2014-2710: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Oliver formerly Webshare 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the 1 login page index.php or 2 login form loginform-inc.php...

archiwum.polityka.pl XSS vulnerability

Vulnerable URL: http://archiwum.polityka.pl/sso/loginform?return=→"...

CVE-2015-1512

Multiple cross-site scripting XSS vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginFormusername to ui/system/login or the 2 order or 3 myorgs to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginFormusername to ui/system/login or the 2 order or 3 myorgs to index.php...

PT-2015-5335

Name of the Vulnerable Software and Affected Versions FancyFon FAMOC versions prior to 3.17.4 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the LoginFormusername to...

CVE-2015-1512: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the 1 LoginFormusername to ui/system/login or the 2 order or 3 myorgs to index.php...