GHSA-4HC4-8599-XH2H OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service

Summary Critical Time-Based Blind SQL Injection vulnerability affecting multiple search modules in OpenSTAManager v2.9.8 allows authenticated attackers to extract sensitive database contents including password hashes, customer data, and financial records through time-based Boolean inference attac...

org.hibernate:hibernate-search-infinispan (5.0.0.beta1), org.hibernate:hibernate-search-modules (5.0.0.beta1) +29 more potentially affected by CVE-2019-10174 via org.infinispan:infinispan-core (7.0.0.cr2)

org.infinispan:infinispan-core MAVEN version 7.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan 5.0.0.beta1 - org.hibernate:hibernate-search-modules...

org.hibernate:hibernate-search-infinispan (>=4.3.0.alpha1, <=4.3.0.final), org.hibernate:hibernate-search-modules (>=4.3.0.alpha1, <=4.3.0.final) +36 more potentially affected by CVE-2017-15089 via org.infinispan:infinispan-core (5.2.5.final)

org.infinispan:infinispan-core MAVEN version 5.2.5.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan =4.3.0.alpha1, =4.3.0.alpha1, =4.3.0.final -...

org.hibernate:hibernate-search-infinispan (5.0.0.alpha5), org.hibernate:hibernate-search-modules (5.0.0.alpha5) +25 more potentially affected by CVE-2019-10158 via org.infinispan:infinispan-core (7.0.0.alpha5)

org.infinispan:infinispan-core MAVEN version 7.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-core and may be impacted: - org.hibernate:hibernate-search-infinispan 5.0.0.alpha5 -...

pointter php content management system 1.2 - Multiple Vulnerabilities

No description provided by source. Pointter PHP Content Management System 1.2 Multiple Vulnerabilities Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that ca...

Commodity Real Estate System Cross Site Scripting

Exploit Title: Commodity Real Estate System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: searchproperty Search Modules Exploit: "/ Demo:...

eShopping Madness Cross Site Scripting

Exploit Title: eShopping Madness Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: search.php Search Modules Exploit: "/ Demo:...

Books Rental Shop System Cross Site Scripting

Exploit Title: Books Rental Shop System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: index.php Search Modules Example: index.php?view=search Exploit: "/ Demo:...

pointter PHP content management system 1.2 - Multiple Vulnerabilities

pointter PHP content management system 1.2 - Multiple Vulnerabilities Pointter PHP Content Management System 1.2 Multiple Vulnerabilities Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast a...