Lucene search
K

13 matches found

OSV
OSV
added 2021/01/27 4:15 p.m.12 views

CVE-2020-23359

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

9.8CVSS7AI score
Exploits0References1
Prion
Prion
added 2021/01/27 4:15 p.m.13 views

Design/Logic Flaw

WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...

7.5CVSS9.4AI score0.00363EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2021/01/27 3:29 p.m.36 views

CVE-2020-23359

CVE-2020-23359 affects WeBid 1.2.2 (admin/newuser.php) where password rechecking during registration uses a loose comparison, allowing two non-identical passwords to bypass the identicalness check. The issue is caused by non-strict equality logic in the registration flow, enabling potential bypas...

9.8CVSS9.5AI score0.00363EPSS
Exploits1References1Affected Software1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.26 views

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

No description provided by source. ======================== WEBXAKEP.NET =========================== Name: Zomplog 3.8.2 = add admin Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: powered by zomplog Discovered By: ArxWolf Discovered On: 16 05 2008 WWW: http://WebXakep.net ICQ:...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2008/11/11 12:0 a.m.14 views

e107 alternate_profiles plugin newuser.php SQL Injection Vulnerability

e107 is prone to remote SQL injection vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107"; ifdescription...

7.5CVSS7.8AI score0.00504EPSS
Exploits0References3
Prion
Prion
added 2008/10/29 2:22 p.m.10 views

Sql injection

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.00504EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2008/10/29 2:0 p.m.14 views

CVE-2008-4785

SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.4AI score0.00504EPSS
Exploits0References4
CVE
CVE
added 2008/10/29 2:0 p.m.47 views

CVE-2008-4785

CVE-2008-4785 affects the e107 CMS, specifically the alternate_profiles plugin’s newuser.php. The vulnerability is a SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Reported across multiple sources (NVD entries, OpenVAS, advisories) with a CVSS v2 ...

7.5CVSS8.4AI score0.00504EPSS
Exploits0References4Affected Software1
seebug.org
seebug.org
added 2008/05/17 12:0 a.m.18 views

Zomplog &lt;= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

No description provided by source. ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 = add admin" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: ArxWolf Discovered On: 16 05 2008 WWW: http://WebXakep.net ICQ...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2008/05/16 12:0 a.m.11 views

Zomplog 3.8.2 - newuser.php Arbitrary Add Admin

Zomplog 3.8.2 - newuser.php Arbitrary Add Admin ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2008/05/16 12:0 a.m.29 views

Zomplog 3.8.2 - &#039;newuser.php&#039; Arbitrary Add Admin

======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm password"...

7.4AI score
Exploits0
0day.today
0day.today
added 2008/05/16 12:0 a.m.29 views

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ========================================================== Zomplog Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm...

7.1AI score
Exploits0
NVD
NVD
added 2006/09/28 12:7 a.m.7 views

CVE-2006-5059

Multiple cross-site scripting XSS vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to 1 dosearch.php, 2 postlist.php, 3 showmembers.php, 4 faqenglish.php, 5 online.php, 6 login.php, 7 newuser.php, 8 wwwthreads.php,...

5.1CVSS5.8AI score0.01288EPSS
Exploits1References5
Rows per page
Query Builder