13 matches found
CVE-2020-23359
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
Design/Logic Flaw
WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can still bypass the check...
CVE-2020-23359
CVE-2020-23359 affects WeBid 1.2.2 (admin/newuser.php) where password rechecking during registration uses a loose comparison, allowing two non-identical passwords to bypass the identicalness check. The issue is caused by non-strict equality logic in the registration flow, enabling potential bypas...
Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit
No description provided by source. ======================== WEBXAKEP.NET =========================== Name: Zomplog 3.8.2 = add admin Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: powered by zomplog Discovered By: ArxWolf Discovered On: 16 05 2008 WWW: http://WebXakep.net ICQ:...
e107 alternate_profiles plugin newuser.php SQL Injection Vulnerability
e107 is prone to remote SQL injection vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107"; ifdescription...
Sql injection
SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4785
SQL injection vulnerability in newuser.php in the alternateprofiles plugin, possibly 0.2, for e107 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4785
CVE-2008-4785 affects the e107 CMS, specifically the alternate_profiles plugin’s newuser.php. The vulnerability is a SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Reported across multiple sources (NVD entries, OpenVAS, advisories) with a CVSS v2 ...
Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit
No description provided by source. ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 = add admin" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: ArxWolf Discovered On: 16 05 2008 WWW: http://WebXakep.net ICQ...
Zomplog 3.8.2 - newuser.php Arbitrary Add Admin
Zomplog 3.8.2 - newuser.php Arbitrary Add Admin ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 ДобавлÑем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" ПовторÑем пароль...
Zomplog 3.8.2 - 'newuser.php' Arbitrary Add Admin
======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 ДобавлÑем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" ПовторÑем пароль "Confirm password"...
Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit
Exploit for unknown platform in category web applications ========================================================== Zomplog ДобавлÑем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" ПовторÑем пароль "Confirm...
CVE-2006-5059
Multiple cross-site scripting XSS vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to 1 dosearch.php, 2 postlist.php, 3 showmembers.php, 4 faqenglish.php, 5 online.php, 6 login.php, 7 newuser.php, 8 wwwthreads.php,...