15 matches found
EUVD-2026-29370
Due to a reflected cross-site scripting XSS vulnerability in SAP NetWeaver Application Server ABAP Applications based on Business Server Pages, an unauthenticated attacker could craft a URL that exploits an unprotected URL parameter to embed a malicious script. If a victim clicks the link, the...
EUVD-2004-1506
Malware in sbrugna...
EUVD-2009-4691
Malware in sbrugna...
EUVD-2009-2636
Malware in sbrugna...
CVE-2024-6450 Reflected XSS in HyperView Geoportal Toolkit
HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting XSS. An unauthenticated attacker might trick somebody into using a crafted URL, which will cause a script to be run in user's browser...
CVE-2022-28770
Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...
Campsite 3.3.5 - CSRF Vulnerability
No description provided by source. ======================================================================= campsite 3.3.5 CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected]...
Sql injection
SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...
Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability
No description provided by source. - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login sebug.net...
CVE-2009-2642
The CVE-2009-2642 issue affects Desi Short URL Script 1.0, where index.php allows remote attackers to bypass authentication by tampering with cookies: set logged=1 and uid= (example 13). This indicates insufficient server-side validation of session cookies, enabling partial integrity and confiden...
CVE-2009-2642
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13...
AgerMenu 0.01 (top.inc.php rootdir) Remote File Include Vulnerability
=============================================================== Discovered by GolDMMahmnoodali & & Contact: [email protected] =============================================================== URL Script: http://www.chbs.dk/proj/agermenu/agermenu-0.01.tgz...
AgerMenu 0.01 - top.inc.php?rootdir Remote File Inclusion
AgerMenu 0.01 - top.inc.php?rootdir Remote File Inclusion =============================================================== Discovered by GolDMMahmnoodali & & Contact: [email protected] =============================================================== URL Script:...
CVE-2004-1512
Cross-site scripting XSS vulnerability in Responsedefault.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page...
[SA13605] tlen URL Script Insertion Vulnerability
TITLE: tlen URL Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13605 VERIFY ADVISORY: http://secunia.com/advisories/13605/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: tlen 5.x http://secunia.com/product/4442/ DESCRIPTION: A vulnerability has been...