UNIT4 Prosoft HRMS Cross-Site Scripting Vulnerability

UNIT4 Prosoft HRMS is a complete HR system suite. The suite streamlines HR processes to maximize the efficiency of business organizations. A cross-site scripting vulnerability exists in the Login.aspx file in UNIT4 Prosoft HRMS 8.14.230.47 and prior versions. A remote attacker can exploit the...

UBUNTU-CVE-2013-4340

wp-admin/includes/post.php in WordPress before 3.6.1 allows remote authenticated users to spoof the authorship of a post by leveraging the Author role and providing a modified userID parameter...

Et-Chat 3.07 Privilege Escalation / Shell Upload

Exploit Title: Et-chat 3.07 user id Parameter Remote code execution Exploit Author: MR.XpR Script Download : http://et-chat.ir/up/etchatv307.zip Risk : Normal Platforms : PHP Tested on: 7 , KAli , Vista Date : 2013 -====================- How does : This error occurs due to keep cookies Exploit :...

CVE-2010-5024

SQL injection vulnerability in manage/adduser.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the userid parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-3602

Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-3602

Cross-site scripting XSS vulnerability in ProfileView.aspx in mojoPortal 2.3.4.3 and 2.3.5.1 allows remote attackers to inject arbitrary web script or HTML via the User ID parameter. NOTE: some of these details are obtained from third party information...

PT-2008-5267 · Opendb · Opendb

Name of the Vulnerable Software and Affected Versions: OpenDb version 1.0.6 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the user id parameter in an edit action to "user admin.php", the title parameter to "listings.php", and the...

CVE-2008-0290

Multiple SQL injection vulnerabilities in Digital Hive 2.0 RC2 and earlier allow 1 remote attackers to execute arbitrary SQL commands via the selectskin parameter to an unspecified program, or 2 remote authenticated administrators to execute arbitrary SQL commands via the userid parameter in the...