1779 matches found
CVE-2018-6579: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JEXTN Reverse Auction 3.1.0 component for Joomla! via a view=products&uid= request...
PT-2018-17643
Name of the Vulnerable Software and Affected Versions JEXTN Reverse Auction version 3.1.0 Description A SQL Injection issue exists in the JEXTN Reverse Auction component for Joomla. This issue can be exploited via a request to the view=products&uid= endpoint, where the uid parameter is vulnerable...
Linux/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)
/ This shellcode writes to /etc/passwd the string for the user with uid&gid == 0; written by dev0id email protected rootteam.void.ru rus-sec /Efnet.org greetz: nerf w00w00 BITS 32 jmp short path main: pop esi xor eax,eax push eax mov byte esi+11,al mov al,0x0a push eax push esi mov al,5 push eax...
BSD/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)
/ writes the line for user in /etc/passwd with uid&gid == 0 OS: BSD length: 74 written by dev0id email protected rootteam.void.ru rus-sec /Efnet.org greetz: mig nerf BITS 32 main: xor eax,eax push eax push byte 0x64 push word 0x7773 push long 0x7361702f push long 0x6374652f mov ebx,esp mov al,0x0...
Two Sides App has an override access vulnerability
Two Sides APP is an emotional, psychological and fun social software launched by Beijing Two Sides Network Technology Co. Two Sides APP 3.0.28 Android version has an override access vulnerability, after logging in to the system, an attacker can log in to other users' systems and perform...
CVE-2017-17776
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
CVE-2017-17778
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...
Path traversal
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
CVE-2017-17776
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
CVE-2017-17778
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...
CVE-2017-17776
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
PT-2017-14995
Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is possible through the tier parameter in the "referrals.php" endpoint or the uid parameter in the...
CVE-2017-17778: Improper Neutralization of Input During Web Page Generation
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter...
Paid To Read Script Cross-Site Scripting Vulnerability
PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can exploit this vulnerability by sending the 'tier' parameter to the...
CVE-2017-17776: Exposure of Sensitive Information to an Unauthorized Actor
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter...
PT-2017-14994
Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue concerns an authentication bypass in the admin panel, which can be exploited via a direct request. Specifically, the fn parameter in the "admin/viewvisitcamp.php" endpoint and the uid...
PT-2017-14993
Name of the Vulnerable Software and Affected Versions Paid To Read Script version 2.0.5 Description The issue is related to full path disclosure. This occurs when an invalid uid parameter is provided in the admin/userview.php endpoint. Recommendations For Paid To Read Script version 2.0.5, consid...
PHP Scripts Mall Paid To Read Script SQL Injection Vulnerability
PHP Scripts Mall Paid To Read Script is a set of paid to read website scripts by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Paid To Read Script version 2.0.5. A remote attacker can inject SQL into the Paid To Read Script 2.0.5 by sending the 'uid' parameter t...