CVE-2009-4827

Cross-site request forgery CSRF vulnerability in admin.php in Mail Manager Pro allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a change action...

CVE-2009-4827

The CVE-2009-4827 issue affects Mail Manager Pro, specifically the admin.php component. A cross-site request forgery (CSRF) vulnerability exists that allows remote attackers to hijack administrator sessions and perform password-change actions via a crafted request. The underlying impact is that a...

Sql injection

SQL injection vulnerability in photos.php in Model Agency Manager PRO formerly Modeling Agency Content Management Script allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2009-4731

CVE-2009-4731 is a SQL injection vulnerability affecting the Photos.php component of Model Agency Manager PRO (previously Modeling Agency Content Management Script). The underlying issue is improper handling of the album parameter, allowing remote attackers to manipulate SQL queries and potential...

CVE-2009-4731

SQL injection vulnerability in photos.php in Model Agency Manager PRO formerly Modeling Agency Content Management Script allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2009-4387

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

Cross site scripting

The cross-site scripting XSS protection mechanism in ShowInContentAreaAction.do in ManageEngine Password Manager Pro PMP before 6.1 Build 6104 uses case-sensitive checks for malicious inputs, which allows remote attackers to inject arbitrary web script or HTML via the searchtext parameter and oth...

CVE-2009-4387

CVE-2009-4387 : In ManageEngine Password Manager Pro (PMP) ≤ 6.1 Build 6104, the XSS protection in ShowInContentAreaAction.do relies on case‑sensitive input checks, allowing remote attackers to inject arbitrary script/HTML via the searchtext parameter and other inputs. This bypasses the intended ...

Mail Manager Pro Cross Site Request Forgery

----------------------------------------------------------------------------------------------- Title: Mail Manager Pro XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009. Application: Mail Manager Pro Version: the only one there is Link:...

Ez News Manager Pro - Cross-Site Request Forgery (Change Admin Password)

Ez News Manager Pro - Cross-Site Request Forgery Change Admin Password ----------------------------------------------------------------------------------------------- Title: Ez News Manager / Pro - XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15...

Mail Manager Pro - Cross-Site Request Forgery (Change Admin Password)

Mail Manager Pro - Cross-Site Request Forgery Change Admin Password ----------------------------------------------------------------------------------------------- Title: Mail Manager Pro XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

Mail Manager Pro - Cross-Site Request Forgery (Change Admin Password)

----------------------------------------------------------------------------------------------- Title: Mail Manager Pro XSRF Change Admin Password Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009. Application: Mail Manager Pro Version: the only one there is Link:...

Mail Manager Pro XSRF (Change Admin Password)

Exploit for unknown platform in category web applications ============================================= Mail Manager Pro XSRF Change Admin Password ============================================= ----------------------------------------------------------------------------------------------- Title:...

CVE-2009-3175

Multiple SQL injection vulnerabilities in Model Agency Manager PRO formerly Modeling Agency Content Management Script allow remote attackers to execute arbitrary SQL commands via the userid parameter to 1 view.php, 2 photos.php, and 3 motm.php; and the 4 id parameter to forummessage.php...

Sql injection

Multiple SQL injection vulnerabilities in Model Agency Manager PRO formerly Modeling Agency Content Management Script allow remote attackers to execute arbitrary SQL commands via the userid parameter to 1 view.php, 2 photos.php, and 3 motm.php; and the 4 id parameter to forummessage.php...

CVE-2009-3175

Multiple SQL injection vulnerabilities in Model Agency Manager PRO formerly Modeling Agency Content Management Script allow remote attackers to execute arbitrary SQL commands via the userid parameter to 1 view.php, 2 photos.php, and 3 motm.php; and the 4 id parameter to forummessage.php...

CVE-2009-3175

Model Agency Manager PRO (formerly Modeling Agency Content Management Script) has multiple SQL injection vulnerabilities. The flaws allow remote attackers to execute arbitrary SQL via the user_id parameter to view.php, photos.php, and motm.php, and via the id parameter to forum_message.php. Root ...

Model Agency Manager Pro (user_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Model Agency Manager Pro userid SQL Injection Vulnerability ============================================================== Tybe:view.php userid Remote SQL Injection Vulnerabili...

Model Agency Manager Pro - user_id SQL Injection

Model Agency Manager Pro - userid SQL Injection ☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠Tybe:view.php userid Remote SQL Injection Vulnerability ☠...

Model Agency Manager Pro (user_id) SQL Injection Vulnerability

No description provided by source. ☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠Tybe:view.php userid Remote SQL Injection Vulnerability ☠Vendor:...