EUVD-2019-4746

Malware in sbrugna...

GHSA-2M9R-PM7Q-WR6F GeniXCMS denial of service (account blockage)

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...

CVE-2019-13239

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

CVE-2019-13239

Vulnerability overview : GLPI

CVE-2019-13239: Improper Neutralization of Input During Web Page Generation

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

PT-2019-13201

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.4.3 Description The issue allows for XSS via a user picture in the inc/user.class.php file. Recommendations For versions prior to 9.4.3, update to version 9.4.3 or later to resolve the issue...

Sql injection

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

CVE-2015-3933

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

PT-2017-6710

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 0.0.3-patch Description The issue concerns SQL injection vulnerabilities in the inc/lib/User.class.php file. Remote attackers can execute arbitrary SQL commands via the email parameter or the userid parameter to the...

CVE-2015-3933: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

CVE-2017-14231

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...

CVE-2017-14231

GeniXCMS before 1.1.0 allows remote attackers to cause a denial of service account blockage by leveraging the mishandling of certain username substring relationships, such as the admin username versus the admin username, related to register.php, User.class.php, and Type.class.php...

PT-2017-13312

Name of the Vulnerable Software and Affected Versions GeniXCMS versions prior to 1.1.0 Description The issue allows remote attackers to cause a denial of service, specifically account blockage, by exploiting the mishandling of certain username substring relationships. This is related to files suc...

TCcms v9. 0 /app/controller/user.class.php parameters userId SQL injection vulnerability

0x01 vulnerability profile TCcms v9. 0 version in the file/app/controller/user. class. php at the parameters userId the presence of SQL injection vulnerabilities. 0x02 vulnerability analysis 先看文件/app/model/newsAction.class.php that 108 row begin public function getCountByUid $info =...

TCCMS v9.0 user.class.php sql注入漏洞

No description provided by source...

GeniXCMS 0.0.3 - register.php SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Genixcms register.php multiple SQL vuln Date: 2015-06-23 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.genixcms.org Software Link: https://codeload.github.com/semplon/GeniXCMS/zip/master/GeniXCMS-master.zip Version:...

GeniXCMS 0.0.3 - register.php SQL Injection

GeniXCMS 0.0.3 - register.php SQL Injection Exploit Title: Genixcms register.php multiple SQL vuln Date: 2015-06-23 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.genixcms.org Software Link: https://codeload.github.com/semplon/GeniXCMS/zip/master/GeniXCMS-master.zip Version: 0.0.3...

Clip Bucket 1.7.1 - Insecure Cookie Handling

|| || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ\ /QQ\QQQQ/ \QQQQ\ \QQQQQQQ/ \QQQQQ...