PT-2025-47177

Name of the Vulnerable Software and Affected Versions Kashipara Ecommerce Website version 1.0 Description The Kashipara Ecommerce Website is susceptible to a SQL Injection issue through the recover email parameter in the user password recover.php file. This allows for potential unauthorized acces...

EUVD-2021-13965

Malware in sbrugna...

EUVD-2007-5955

Malware in sbrugna...

CVE-2021-27200

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day...

Code injection

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day...

CVE-2021-27200

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day...

CVE-2021-27200

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day...

CVE-2021-27200

CVE-2021-27200 affects WoWonder 3.0.4. The issue is a weak cryptographic algorithm in recover.php, making the code parameter easily predictable from the time of day. This enables remote attackers to take over any account. The vulnerability is described consistently across multiple sources (NVD, R...

PT-2021-17318

Name of the Vulnerable Software and Affected Versions: WoWonder version 3.0.4 Description: The issue allows remote attackers to take over any account due to a weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day. Recommendations: For WoWonder...

CVE-2021-27200: Use of Insufficiently Random Values

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day...

CVE-2014-9096

Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...

PT-2014-8823

Name of the Vulnerable Software and Affected Versions Pligg CMS versions 2.0.1 and earlier Description The issue concerns SQL injection vulnerabilities in the recover.php file. Remote attackers can execute arbitrary SQL commands by manipulating the id or n parameters. Recommendations For Pligg CM...

CVE-2014-9096: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in recover.php in Pligg CMS 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 n parameter...

Unfixed XSS vulnerability at www.bitgamer.su

Security researcher WaR, has submitted on 04/01/2012 a cross-site-scripting XSS vulnerability affecting www.bitgamer.su, which at the time of submission ranked 30031 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently...

Default credentials

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

CVE-2009-2158: Use of Insufficiently Random Values

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

CVE-2007-5985: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 account.php, 2 moresmiles.php, or 3 recover.php; or 4 the "to" parameter to usercp.php...