SQL Injection Vulnerability in Loginname Parameter of EVERGETS Broadband Billing System

EVERGETTING BROADBAND BILLING SYSTEM is to support a variety of user authentication methods. A SQL injection vulnerability exists in the loginname parameter of the EVERJETSON Broadband Billing System. This vulnerability can be exploited by attackers to obtain sensitive information...

用友TruboCRM管理系统 /login/forgetpswd.php loginname 参数SQL注入漏洞

No description provided by source...

Cross site scripting

Cross-site scripting XSS vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the Loginname parameter...

CVE-2012-1825

Multiple cross-site scripting XSS vulnerabilities in the status program on the ForeScout CounterACT appliance with software 6.3.3.2 through 6.3.4.10 allow remote attackers to inject arbitrary web script or HTML via 1 the loginname parameter in a forgotpass action or 2 the username parameter...

Core topology of the Tourist Information Portal system 1.1 injection vulnerability-vulnerability warning-the black bar safety net

Core topology of the tourist information portal of the system is Yongzhou core topology of the tourist information web site management system includes a corporate web site commonly used in a variety of functions, with a complete backend management system, The present program without any feature...

Design/Logic Flaw

Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname "%%%" to admin/index.php, which reveals the installation path and other information in an error message...

CVE-2009-3802

CVE-2009-3802 affects Amiro.CMS 5.4.0.0 and earlier. The issue stems from an invalid loginname value ("%%%") to _admin/index.php which causes an error message that reveals the installation path and other information, enabling partial information disclosure. The NVD entry lists a Medium severity (...

CVE-2009-3802

Amiro.CMS 5.4.0.0 and earlier allows remote attackers to obtain sensitive information via an invalid loginname "%%%" to admin/index.php, which reveals the installation path and other information in an error message...

Sql injection

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

EvansFTP Buffer Overflow

EvansFTP EvansFTP.ocx Remote Buffer Overflow PoC + Application : EvansFTP ActiveX + CompanyName : Evans Programming + Description : Multi-threaded asynchronus Active-X FTP Control + Lib GUID : DA3C77F4-8701-11D4-908B-00010268221D + Exploit : Remote BoF PoC + Author : Bl@ckbe@rD //...

oneSCHOOL - adminlogin.asp SQL Injection

oneSCHOOL - adminlogin.asp SQL Injection !/usr/bin/python oneSCHOOL admin/login.asp SQL Injection explot for all versions by Guga360. import urllib from sys import argv query = 'txtOperation':'Login','txtLoginID':""" ' union select...

CVE-2007-6498

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 email and 2 loginname parameters to Hosting/Addreseller.asp, 3 the sortfield parameter to accounts/accountmanager.asp, 4 the...

CVE-2007-6498

Multiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 email and 2 loginname parameters to Hosting/Addreseller.asp, 3 the sortfield parameter to accounts/accountmanager.asp, 4 the...