mh-friends.com XSS vulnerability

Open Bug Bounty ID: OBB-585328 Description| Value ---|--- Affected Website:| mh-friends.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mh-center.info Open Redirect vulnerability

Vulnerable URL: http://mh-center.info/BannerSystem/adclick.php?bannerid=5=2==http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

BSDi 3.0 / 4.0 rcvtty[mh] Local Exploit

No description provided by source. / BSDi3.0/4.0rcvttymh local exploit, by [email protected]. this exploit is for the rcvtty of the mh package, which is setgid=4tty on BSDi. this exploit gives you egid/group=4tty access. example: ------------------------------------------------- bash-2.02$ id...

CVE-2010-5062

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

Sql injection

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-5062

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-5062

CVE-2010-5062 affects MH Products kleinanzeigenmarkt; vulnerability in search.php, via the c parameter, allows remote attackers to perform SQL injection and execute arbitrary SQL commands. Root cause: improper input handling in the search functionality leading to unauthenticated database access. ...

CVE-2010-5062: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2010-4845

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

CVE-2010-4847

SQL injection vulnerability in viewitem.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-4844

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

Sql injection

Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the 1 ts parameter to details.php and possibly the 2 ilceler parameter to index.php...

Sql injection

SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter...

Sql injection

SQL injection vulnerability in viewitem.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

Sql injection

SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...

CVE-2010-4847

CVE-2010-4847 affects MH Products MHP Downloadshop. A SQL injection in view_item.php via the ItemID parameter allows remote attackers to execute arbitrary SQL commands. Root cause: lack of input validation in the vulnerable script. Impact: as described, arbitrary SQL execution with affected privi...

CVE-2010-4844

CVE-2010-4844 describes an SQL injection vulnerability in content.php of MH Products Easy Online Shop, exploitable via the kat parameter to execute arbitrary SQL commands. The provided documents do not specify affected versions, root cause details beyond the injection flaw, or any remediation ste...

CVE-2010-4846

CVE-2010-4846: A SQL injection vulnerability exists in view_item.php of MH Products Pay Pal Shop Digital, allowing remote attackers to execute arbitrary SQL commands through the ItemID parameter. The vulnerability affects the web application by inserting unvalidated input into a SQL query, enabli...

CVE-2010-4842

The vulnerability is a SQL injection in admin/login.php of the MHP DownloadScript (aka MH Products Download Center) version 2.2. The root cause is improper handling of the Name parameter, enabling remote attackers to craft inputs that cause arbitrary SQL execution. Impact per sources is uncontrol...

CVE-2010-4845

CVE-2010-4845 involves multiple SQL injection vulnerabilities in MH Products Projekt Shop. The affected component is the web shop software, with injectable parameters identified as (1) ts in details.php and (2) ilceler in index.php, enabling remote attackers to issue arbitrary SQL commands. The a...