4 matches found
albeon.ru XSS vulnerability
Vulnerable URL: https://albeon.ru:8445/inc/lostpwd.php Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 21:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5838327 VIP website status:| No Check albeon.ru SSL...
CVE-2007-5649
Cross-site scripting XSS vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lostid parameter...
Socketmail 2.2.1 - lostpwd.php Cross-Site Scripting
Socketmail 2.2.1 - lostpwd.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26138/info SocketMail is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
Cyphor 0.19 - lostpwd.php?nick SQL Injection
Cyphor 0.19 - lostpwd.php?nick SQL Injection source: https://www.securityfocus.com/bid/15047/info Cyphor is prone to multiple cross-site scripting and SQL injection vulnerabilities. Exploitation could allow for theft of cookie-based authentication credentials or unauthorized access to database...