CVE-2020-25472: Cross-Site Request Forgery (CSRF)

SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery CSRF vulnerability, which allows attackers to add new users...

CVE-2020-25473: Undefined Security Weakness

SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies...

PT-2020-16092

Name of the Vulnerable Software and Affected Versions SimplePHPscripts News Script PHP Pro version 2.3 Description The issue is related to the improper setting of the HttpOnly Flag from Session Cookies. This could potentially allow unauthorized access to session cookies. Recommendations For...

Jirafeau Cross-Site Scripting Vulnerability (CNVD-2018-13450)

Jirafeau is a file sharing website system. A cross-site scripting vulnerability exists in the script.php file in Jirafeau versions prior to 3.4.1. A remote attacker can exploit this vulnerability to execute JavaScript code with the 'Content-Type' and 'filename' parameters...

Easy News Pro 1.5 Bypass / SQL Injection / File Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

News Script PHP Pro - (fckeditor) File Upload Vulnerability

No description provided by source...

News Script PHP 1.2 - Multiple Vulnerabilites

No description provided by source. Title: ====== News Script PHP v1.2 - Multiple Web Vulnerabilites Date: ===== 2012-06-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=600 VL-ID: ===== 600 Common Vulnerability Scoring System: ==================================== 7.5...

Event Script PHP 1.1 CMS SQL 注入

No description provided by source...

Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities

Title: ====== Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities Date: ===== 2012-06-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=605 VL-ID: ===== 605 Common Vulnerability Scoring System: ==================================== 5.5 Introduction:...

Event Script PHP 1.1 CMS - Multiple Vulnerabilities

Event Script PHP 1.1 CMS - Multiple Vulnerabilities Title: ====== Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites Date: ===== 2012-06-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=606 VL-ID: ===== 606 Common Vulnerability Scoring System:...

Event Script PHP 1.1 CMS - Multiple Vulnerabilities

Title: ====== Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites Date: ===== 2012-06-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=606 VL-ID: ===== 606 Common Vulnerability Scoring System: ==================================== 7 Introduction: ============= Even...

Event Script PHP CMS 1.1 SQL Injection

Title: ====== Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites Date: ===== 2012-06-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=606 VL-ID: ===== 606 Common Vulnerability Scoring System: ==================================== 7 Introduction: ============= Even...

News Script PHP v1.2 - Multiple Web Vulnerabilites

Title: ====== News Script PHP v1.2 - Multiple Web Vulnerabilites Date: ===== 2012-06-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=600 VL-ID: ===== 600 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Visitor...

Funeral Script PHP - Multiple Web Vulnerabilities

Document Title: =============== Funeral Script PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=604 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 604 Commo...

News Script PHP 1.2 - Multiple Vulnerabilities

Title: ====== News Script PHP v1.2 - Multiple Web Vulnerabilites Date: ===== 2012-06-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=600 VL-ID: ===== 600 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Visitor...

Funeral Script PHP - Multiple Web Vulnerabilities

Document Title: =============== Funeral Script PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=604 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 604 Commo...

Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities

Document Title: =============== Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=605 Release Date: ============= 2012-06-12 Vulnerability Laboratory ID VL-ID:...

GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilities

Document Title: =============== GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=601 Release Date: ============= 2012-06-10 Vulnerability Laboratory ID VL-ID: ==================================== 6...

Event Script PHP v1.1 CMS - Multiple Web Vulnerabilities

Document Title: =============== Event Script PHP v1.1 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=606 Release Date: ============= 2012-06-09 Vulnerability Laboratory ID VL-ID: ==================================== 60...

Event Script PHP v1.1 CMS - Multiple Web Vulnerabilities

Document Title: =============== Event Script PHP v1.1 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=606 Release Date: ============= 2012-06-09 Vulnerability Laboratory ID VL-ID: ==================================== 60...