SQL Injection Vulnerability in the Remote Consultation System of Beijing Blue Weather Technology Co.

BlueWell is a high-tech enterprise specializing in providing telemedicine services, and has constructed a nationwide telemedicine service platform, realizing a system platform for teleconsultation, specialist diagnosis, remote monitoring, surgical demonstration, two-way referral, remote education...

SQL Injection Vulnerability in Communication Application Server username Parameter of Shenou Communication Equipment Co.

Shenou Communication Equipment Co., Ltd. is a national non-regional enterprise integrating R&D, production, sales and service. Communication Application Server SOC1000 model products are softswitch servers for IP networks, supporting voice, fax and video at the same time. Shenou Communication...

KingCms v9 /user/manage.php username参数等2处SQL注入

No description provided by source...

CVE-2016-3968

Multiple cross-site scripting XSS vulnerabilities in Sophos Cyberoam CR100iNG UTM appliance with firmware 10.6.3 MR-1 build 503, CR35iNG UTM appliance with firmware 10.6.2 MR-1 build 383, and CR35iNG UTM appliance with firmware 10.6.2 Build 378 allow remote attackers to inject arbitrary web scrip...

京信通信/09/business/loginAction.php username参数命令执行漏洞

No description provided by source...

Shop7z v2.9 getpassword3.asp 文件 username 参数 SQL注入漏洞

No description provided by source...

Advantech WebAccess datacore Service datacore.exe Username strcpy Stack-Based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable instances of Advantech WebAccess. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the 0x5218 IOCTL in the Kernel subsystem. A stack-based buffer...

ntopng Elevation of Privilege Vulnerability

ntopng is a new generation of cross-platform Web-based network traffic analysis and monitoring tools . The ntopng admin/passwordreset.lua file fails to adequately filter user cookies and the 'username' parameter, allowing remote attackers to exploit the vulnerability to change the login context a...

Code injection

ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...

CVE-2015-8368

ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...

PT-2015-7776

Name of the Vulnerable Software and Affected Versions ntopng aka ntop versions prior to 2.2 Description The issue allows remote authenticated users to change the login context and gain privileges. This is achieved via the username parameter to the "admin/password reset.lua" endpoint...

CVE-2015-8368: Undefined Security Weakness

ntopng aka ntop before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/passwordreset.lua...

SQL Injection Vulnerability in the username parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the username parameter of WaveSoft...

Sophos Cyberoam CR500iNG-XP Firewall SQL Injection Vulnerability

Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS is a new-generation firewall from Sophos, UK, running the CyberoamOS operating system, which provides online application detection and control, web filtering, HTTPS checking, intrusion prevention and other features. It provides online...

PT-2015-7367

Name of the Vulnerable Software and Affected Versions Sophos Cyberoam CR500iNG-XP firewall appliance versions prior to CyberoamOS 10.6.2 MR-1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username parameter to the "login.xml" endpoint...

CVE-2015-6811: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to login.xml...

CVE-2015-1389

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...

PT-2015-5260

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the username parameter to the "tips/tipsLoginSubmit.action" API...

CVE-2015-1389: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...