40 matches found
CVE-2020-35847
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...
Sql injection
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function...
CVE-2020-35847
Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. Recent assessments: h00die at May 31, 2021 12:11pm UTC reported: Similar to CVE-2020-35846, this is a noSQL injection using the vardump function to dump all memory for the password reset...
Agentejo Cockpit NoSQL Injection Vulnerability (CNVD-2021-01561)
Agentejo Cockpit is a self-hosted "headless" and api-driven lightweight, open source content management system. A NoSQL injection vulnerability exists in Agentejo Cockpit versions prior to 0.11.2. The vulnerability can be exploited to conduct a NoSQL injection attack via the Controller/Auth.php...
Agentejo Cockpit SQL注入漏洞
Agentejo Cockpit is a self-hosted "headless" and api-driven lightweight, open source content management system. A NoSQL injection vulnerability exists in Agentejo Cockpit versions prior to 0.11.2. The vulnerability can be exploited to conduct a NoSQL injection attack via the Controller/Auth.php...
PT-2019-13579 · Axway · Axway Securetransport
Name of the Vulnerable Software and Affected Versions: Axway SecureTransport versions 5.x through 5.3 Axway SecureTransport versions 5.x through 5.5 with certain API configuration Description: The issue concerns unauthenticated blind XML injection and XXE in the resetPassword functionality via th...
CVE-2019-3578
MyBB 1.8.19 has XSS in the resetpassword function...
CVE-2019-3578
CVE-2019-3578 affects MyBB 1.8.19 and is a Cross-Site Scripting (XSS) vulnerability in the resetpassword function. The available connected documents indicate the issue is an XSS in the resetpassword flow, enabling potential execution of client-side code. Details do not specify attack vectors beyo...
CVE-2019-3578
MyBB 1.8.19 has XSS in the resetpassword function...
PT-2019-16626 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB version 1.8.19 Description: The issue is related to a problem in the resetpassword function, which has XSS. Recommendations: For MyBB version 1.8.19, update to a newer version that contains a fix for this issue...
Desdev DedeCMS Arbitrary Password Reset Vulnerability
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing , content management , content editing and content retrieval functions. A security vulnerability exists in th...
DeDeCMS v5.7 SP2 official version of the foreground any user password change vulnerability
DedeCms woven dream content management system is a PHP open source website management system. DeDeCMS v5.7 SP2 official version of the foreground there are arbitrary user password change vulnerability. The vulnerability is due to the foreground resetpassword.php on the acceptance of the parameter...
Wallacepos Cross-Site Scripting Vulnerability
wallacepos is a web-based POS system. A cross-site scripting vulnerability exists in wallacepos version 1.4.1, which stems from the program's failure to adequately filter user data submitted to wallacepos-master/myaccount/resetpassword.php. A remote attacker can exploit this vulnerability to...
thebeachclub.net XSS vulnerability
Vulnerable URL: https://www.thebeachclub.net/resetpassword.aspx Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12800734 Google Pagerank| 0 VIP website status:| No Check...
metroclub.com XSS vulnerability
Vulnerable URL: https://www.metroclub.com/resetpassword.aspx Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3610700 Google Pagerank| 4 VIP website status:| No Check metroclub.com S...
greenacres.club XSS vulnerability
Vulnerable URL: https://www.greenacres.club/resetpassword.aspx Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7704978 Google Pagerank| 0 VIP website status:| No Check greenacres.cl...
Symantec Endpoint Protection Manager authentication bypass
Added: 08/26/2015 CVE: CVE-2015-1486 BID: 76074 Background Symantec Endpoint Protection, by Symantec Corporation, is an antivirus and personal firewall product designed to be centrally managed in corporate environments by the Symantec Endpoint Protection Manager SEPM. Problem Symantec Endpoint...
Unfixed XSS vulnerability at iloapp.liquidham.se
Security researcher Uber0n, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting iloapp.liquidham.se, which at the time of submission ranked 13043013 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is...
lcs11-rfi.txt
+------------------------------------------------------------------------------------------- local Calendar System v1.1 lcStdLib.inc Remote File Include TrZiNDaN [email protected] Turkey -------------------------------------------------------------------------------------------- download :...
