658 matches found
Sql injection
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...
CVE-2015-3933
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...
CVE-2015-3933: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...
PT-2017-6710
Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.3-patch Description The issue concerns SQL injection vulnerabilities in the inc/lib/User.class.php file. Remote attackers can execute arbitrary SQL commands via the email parameter or the userid parameter to the...
stiell.be XSS vulnerability
Vulnerable URL: http://stiell.be/register.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...
krommetje.nl XSS vulnerability
Vulnerable URL: https://www.krommetje.nl/humo-gen/register.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosur...
stylees.de XSS vulnerability
Open Bug Bounty ID: OBB-307503 Description| Value ---|--- Affected Website:| stylees.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2017-14231
GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...
CVE-2017-14231
GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...
PT-2017-13312
Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 1.1.0 Description The issue allows remote attackers to cause a denial of service, specifically account blockage, by exploiting the mishandling of certain username substring relationships. This is related to files suc...
bpna.org.uk XSS vulnerability
Vulnerable URL: https://www.bpna.org.uk/register.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3828708 VIP website status:| No Check bpna.org.uk SSL connection:| Grade: B...
columbia-language.scheduling.online XSS vulnerability
Vulnerable URL: https://columbia-language.scheduling.online/iappi/register/register.php?role=1"...
AlertDanger Protection Bypass
genix/cms is vulnerable to alertDanger protection bypass. It is possible to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit=1 request...
Cross site request forgery (csrf)
GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit&id=1 request...
CVE-2017-8388
GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit&id=1 request...
CVE-2017-8388
GeniXCMS 1.0.2 is affected by a protection bypass vulnerability that allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection via a register.php?act=edit&id=1 request. The issue is consistently described across multiple sources (NVD entry, GHSA/OSV entries, and related ad...
CVE-2017-8388: Undefined Security Weakness
GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSGUSEREMAILEXIST protection mechanism via a register.php?act=edit&id=1 request...
PT-2017-18311
Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.0.2 Description The issue allows remote attackers to bypass a protection mechanism. This is achieved by sending a request to the "register.php?act=edit&id=1" endpoint. Recommendations For GeniXCMS version 1.0.2, consider...
hamburg-adressbuch.de XSS vulnerability
Vulnerable URL: http://www.hamburg-adressbuch.de/register.php?stichwort=%22+onmouseover%3Dalert%28%2FOPENBUGBOUNTY%2F%29+lol====alle=suchen=search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...