CVE-2020-37046: Cross-Site Request Forgery (CSRF)

Sistem Informasi Pengumuman Kelulusan Online 1.0 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized admin users through the tambahuser.php endpoint. Attackers can craft a malicious HTML form to submit admin credentials and create new administrative...

EUVD-2008-5962

Malware in sbrugna...

ASIS 3.2.0 SQL Injection Vulnerability

Aplikasi Sistem Sekolah using CodeIgniter 3 versions 3.0.0 through 3.2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

ASIS 3.2.0 SQL Injection

============================================================================================================================================ | Title : ASIS | Aplikasi Sistem Sekolah using CodeIgniter 3 - SQL Injection Authentication Bypass | | Author : checkgue | | Tested on : windows 10 Home /...

CVE-2024-45622

ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass...

PT-2024-31712

Name of the Vulnerable Software and Affected Versions: ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 versions 3.0.0 through 3.2.0 Description: The issue allows attackers to inject SQL through the "index.php" file, which can be exploited to bypass authentication. This is achieved by injecti...

CVE-2024-45622: Improper Neutralization of Special Elements used in an SQL Command

ASIS aka Aplikasi Sistem Sekolah using CodeIgniter 3 3.0.0 through 3.2.0 allows index.php username SQL injection for Authentication Bypass...

Aplikasi Sistem Informasi Kelulusan CMS 1.0.9 Local File Inclusion

==================================================================================================================================== | Title : Aplikasi Sistem Informasi Kelulusan CMS v 1.0.9 ASIK LFI Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozill...

Sistem Informasi Pengumuman Kelulusan Online 1.0 CSRF

Exploit Title: Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery Add Admin Google Dork: N/A Date: 2020-06-10 Exploit Author: Extinction Vendor Homepage: https://adikiss.net/ Software Link:...

Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery (Add Admin)

Exploit for php platform in category web applications Exploit Title: Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery Add Admin Exploit Author: Extinction Vendor Homepage: https://adikiss.net/ Software Link:...

Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery Add Admin Google Dork: N/A Date: 2020-06-10 Exploit Author: Extinction Vendor Homepage: https://adikiss.net/ Software Link:...

MemDb Multiple Remote Dos

No description provided by source. !/usr/bin/python Title: MemDb Multiple Remote Dos Products: MemCompany v1.0- Memdb Memory Database System v1.02- Memdb Online Survey Sistem v2006 Date: 28/06/2010 Author: Markot Advisory: http://www.corelan.be:8866/advisories.php?id=CORELAN-10-054 Platform:...

Sistem Biwes SQL Injection / Path Disclosure

=================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Author: eidelweiss @randyarios Product / software: SISTEM BIWES Vendor Site: http://sistembiwes.com/ Product Price: RM240 /...

Sistem Biwes Multiple Vulnerability

Exploit for php platform in category web applications =================================================================== Sistem Biwes Multiple Vulnerability =================================================================== Google Dork: "Powered by sistembiwes.com" Author: eidelweiss @randyario...

JaydeOnline Search Engine Cross Site Scripting

JaydeOnline Search Engine XSS Vulnerability Author : SOLVER Bug Researchers Date : 13.06.2011 Name : Jayde Online Network Bug Type : XSS Cross Site Scripting Infection : Hedef sistem uzerinde zararli Javascript kodlari calistirilabilir. Explanation : JaydeOnline arama motoru sistemini kullanan we...

MemCompany 1.0 Remote Denial Of Service

!/usr/bin/python Title: MemDb Multiple Remote Dos Products: MemCompany v1.0- Memdb Memory Database System v1.02- Memdb Online Survey Sistem v2006 Date: 28/06/2010 Author: Markot Advisory: http://www.corelan.be:8866/advisories.php?id=CORELAN-10-054 Platform: Windows XP sp3 En Greetz to: Corelan...

Sql injection

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A ESA 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to 1 diger.php and 2 sayfalar.php...

CVE-2008-5992

CVE-2008-5992 affects Jetik Emlak Sistem A (ESA) 2.0. The vulnerability is a SQL injection in the KayitNo parameter used by both diger.php and sayfalar.php, allowing remote attackers to execute arbitrary SQL commands. The available documents do not provide patch details or specific remediation st...

CVE-2008-5992

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A ESA 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to 1 diger.php and 2 sayfalar.php...

CVE-2008-5992: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Jetik Emlak Sistem A ESA 2.0 allow remote attackers to execute arbitrary SQL commands via the KayitNo parameter to 1 diger.php and 2 sayfalar.php...