simple-fax.de XSS vulnerability

Open Bug Bounty ID: OBB-690381 Description| Value ---|--- Affected Website:| simple-fax.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Simple POS and Inventory 1.0 - cat SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Simple POS and Inventory 1.0 - 'cat' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/11625/simple-pos-and-inventory-system.html Software Link:...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-21249)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in the...

Cross site scripting

XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

CVE-2018-18270

XSS exists in CMS Made Simple version 2.2.7 via the m1newsurl parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

CVE-2018-18271

XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

Cross site scripting

XSS exists in CMS Made Simple version 2.2.7 via the m1newsurl parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

CVE-2018-18271

XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

CVE-2018-18270

XSS exists in CMS Made Simple version 2.2.7 via the m1newsurl parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

CVE-2018-18270

XSS exists in CMS Made Simple version 2.2.7 via the m1newsurl parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

CVE-2018-18270

CMS Made Simple 2.2.7 is affected by an XSS in the m1_news_url parameter used in admin/moduleinterface.php during Content → News → Add Article. The Red Hat/NVD/CNVD entries confirm the vulnerability exists in 2.2.7, caused by unsanitized input in that parameter which can inject script/HTML. The m...

CVE-2018-18271

CVE-2018-18271 describes a cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.7. The flaw occurs via the m1_extra parameter in the admin/moduleinterface.php, specifically under Content-->News-->Add Article. The provided documents identify the affected product/version and the v...

CVE-2018-18271

XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content--News--Add Article" action...

DEBIAN-CVE-2018-18066

snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

Synametrics SynaMan Information Disclosure Vulnerability

Synametrics SynaMan is a remote file manager from Synametrics Technologies, USA. An information disclosure vulnerability exists in Synametrics SynaMan version 4.0 build 1488, which stems from the program storing passwords for smtp email accounts in plaintext, which can be exploited by an attacker...

Sql injection

Simple POS 4.0.24 allows SQL Injection via a products/getproducts/ columns0searchvalue parameter in the management panel, as demonstrated by products/getproducts/1...

CVE-2018-17110

Simple POS 4.0.24 allows SQL Injection via a products/getproducts/ columns0searchvalue parameter in the management panel, as demonstrated by products/getproducts/1...

CVE-2018-17110

Simple POS 4.0.24 allows SQL Injection via a products/getproducts/ columns0searchvalue parameter in the management panel, as demonstrated by products/getproducts/1...

CVE-2018-17110

Simple POS 4.0.24 allows SQL Injection via a products/getproducts/ columns0searchvalue parameter in the management panel, as demonstrated by products/getproducts/1...

CVE-2018-17110

CVE-2018-17110 affects Simple POS, version 4.0.24, by allowing SQL Injection through the management panel's products/get_products/1 URL with the columns[0][search][value] parameter. The vulnerability targets the get_products function (columns[0][search][value]) enabling injection and is evidenced...