PT-2015-4082

Name of the Vulnerable Software and Affected Versions Pie Register plugin versions prior to 2.0.14 Description The issue allows remote attackers to add a user by uploading a crafted CSV file or activate a user account via a verifyit action due to improper access restriction to certain functions i...

PHPB2B某处sql注入（危害巨大）

简要描述： PHPB2B某处sql注入（危害巨大） 详细说明： PHPB2B某处sql注入 官网下载的最新版本 绕过全局防注入。 我们先看看全局防注入怎么写的。 以下是全局防注入用到的函数 function pbattackfilter$StrFiltKey,$StrFiltValue,$ArrFiltReq ifisarray$StrFiltValue $StrFiltValue=@implode",", $StrFiltValue; if pregmatch"/".$ArrFiltReq."/is",$StrFiltValue==1 echo $StrFiltValue;...

Design/Logic Flaw

project/register.php in Tuleap before 7.7, when syscreateprojectinonestep is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter...

CVE-2014-8791

project/register.php in Tuleap before 7.7, when syscreateprojectinonestep is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter...

PT-2014-8733

Name of the Vulnerable Software and Affected Versions Tuleap versions prior to 7.7 Description The issue allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter in the project/register.php file when sys create project in one...

CVE-2014-8791: Improper Control of Generation of Code

project/register.php in Tuleap before 7.7, when syscreateprojectinonestep is disabled, allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via the data parameter...

Tuleap 7.6-4 PHP Object Injection Vulnerability

Tuleap versions 7.6-4 and below suffer from a PHP object injection vulnerability in register.php...

SS Downloads 1.4.4.1 - templates/register.php Multiple Parameter Reflected XSS

The SS Downloads WordPress plugin was affected by a templates/register.php Multiple Parameter Reflected XSS security vulnerability...

RLSWordPressSearch - register.php agentid Parameter SQL Injection

The RLSWordPressSearch WordPress plugin was affected by a register.php agentid Parameter SQL Injection security vulnerability...

Wordpress 1.5.1 - 2.0.2 wp-register.php Multiple Parameter XSS

...

CVE-2014-5101: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 TPLname, 2 TPLnick, 3 TPLemail, 4 TPLyear, 5 TPLaddress, 6 TPLcity, 7 TPLprov, 8 TPLzip, 9 TPLphone, 10 TPLppemail, 11 TPLauthnetid, 12 TPLauthnetpass, 13...

PT-2014-6278

Name of the Vulnerable Software and Affected Versions WeBid version 1.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters in actions to register.php and user login.php. The affected parameters include TPL name, TPL nick, TPL email, TPL...

CuteNews 1.4.6 register.php result Parameter XSS

No description provided by source...

Qualiteam X-Cart 4.0.8 register.php mode Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remot...

Vikingboard <= 0.2 Beta 'register.php' SQL Column Truncation Unauthorized Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users. Vikingboard 0.2 Beta is vulnerable; other versions...

vBulletin 3.0 Register.PHP HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8354/info vBulletin may be prone to an HTML injection vulnerability. This issue is exposed through inadequate sanitization of user input for certain fields within the register.php script. An attacker may exploit this issu...

Free Hosting Manager 2.0.2 - Multiple SQLi

No description provided by source. ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13 Vendors :...

Tyger Bug Tracking System 1.1.3 Register.php PATH_INFO Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/22799/info Tyger Bug Tracking System is prone to multiple input-validation vulnerabilities, including one SQL-injection issue and two cross-site scripting issues, because the application fails to sufficiently sanitize...

Opial 1.0 - Arbitrary File Upload/XSS/SQL Injection Vulnerabilities

No description provided by source. ::::::::::::::::::::R3AL.RU:::::::::::::::::::: Opial 1.0 Arbitrary File Upload & XSS & SQL Injection genresparent Author: LMaster Greetz: r3al.ru Official Site with demo: http://www.opial.com --Arbitrary File Upload-- 1. Go to http://www.site.com/register.php 2...

LightBlog <= 9.9.2 (register.php) Remote Code Execution Exploit

No description provided by source. ? / --------------------------------------------------------------- LightBlog = 9.9.2 register.php Remote Code Execution Exploit --------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...