31 matches found
msa.org.au XSS vulnerability
Open Bug Bounty ID: OBB-258655 Description| Value ---|--- Affected Website:| msa.org.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...
cto.med.umich.edu XSS vulnerability
Vulnerable URL: http://cto.med.umich.edu/main.asp?rolename=1"...
skyapp-hr.retas.com.sg XSS vulnerability
Open Bug Bounty ID: OBB-255594 Description| Value ---|--- Affected Website:| skyapp-hr.retas.com.sg Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
pfs.bmsonline.sg XSS vulnerability
Vulnerable URL: http://pfs.bmsonline.sg/main.asp?ApprovalType=1"...
CVE-2010-4989
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...
PT-2011-1924
Name of the Vulnerable Software and Affected Versions Ziggurat Farsi CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the main.asp file via the grp parameter in the...
CVE-2010-4989: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter...
Ziggurat Farsi CMS - SQL Injection
Hello. Thank You For Your Perfect Web Site. Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author: Arash Saadatfar InformatioN Title : Ziggurat Farsi CMS SQL Injection Vulnerability Author : Arash Saadatfar ExploiT Vulnerable File : http://server/main.asp?id=5945&grp=SQL Injection FinisH ...
BackendCMS 5.0 (main.asp id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================== BackendCMS 5.0 main.asp id SQL Injection Vulnerability ======================================================== BackendCMS Version 5.0 SQl Injection Prodcut: BackendCMS Version 5.0...
Back-End CMS 5.0 - main.asp?id SQL Injection
Back-End CMS 5.0 - main.asp?id SQL Injection BackendCMS Version 5.0 SQl Injection Prodcut: BackendCMS Version 5.0 Home : http://www.backendcms.dk/ Vunlerability : SQL Injection Dork : find it yourself Discovred by: AnGeL25dZ Contact : [email protected] Greetz to : ALLAH All Members of HackTeach...
CVE-2008-6376
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...
CVE-2008-6391
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username user parameter...
Sql injection
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...
Sql injection
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username user parameter...
CVE-2008-6391
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username user parameter...
CVE-2008-6391
CVE-2008-6391 describes a SQL injection in main.asp of Jbook, allowing remote attackers to execute arbitrary SQL commands via the username (user parameter). The vulnerability is documented across NVD/NVD-derived records; exploitation details and affected versions are not provided in the included ...
CVE-2008-6376
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...
CVE-2008-6376
CVE-2008-6376 is a SQL injection vulnerability in Jbook’s main.asp that allows remote attackers to execute arbitrary SQL commands via the password (pass) parameter. The NVD entry reports a base score of 7.5 (HIGH) with NETWORK attack vector and low complexity, impact to confidentiality, integrity...
CVE-2008-6376: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the password pass parameter...
CVE-2008-6391: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username user parameter...