CVE-2023-1361 SQL Injection in unilogies/bumsys

SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2...

CVE-2022-2820 Session Fixation in namelessmc/nameless

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2...

CVE-2022-2820

CVE-2022-2820 affects NamelessMC (namelessmc/nameless) versions prior to 2.0.2. The vulnerability is a session fixation issue in the authentication/session handling, with root cause cited as improper session management prior to 2.0.2. Impact is described as elevated risk to user sessions (high co...

Sql injection

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the pagesize parameter at loaddataforgroups.php...

Cross site scripting

A cross-site scripting XSS vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

CVE-2022-31400

A cross-site scripting XSS vulnerability in /staff/setup/email-addresses of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

CVE-2022-31400

Helpdeskz v2.0.2 contains an XSS vulnerability in /staff/setup/email-addresses, due to lack of input filtering/escaping in the email name field. This can permit arbitrary JavaScript/HTML execution in a user’s browser. CVE-2022-31400 is documented with a MEDIUM severity (CVSS3.1 4.8; CVSS2 3.5). N...

CVE-2022-31398

A cross-site scripting XSS vulnerability in /staff/tools/custom-fields of Helpdeskz v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email name field...

CVE-2022-1650

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2...

CVE-2020-24387

CVE-2020-24387 affects yubihsm-shell up to version 2.0.2, where yh_create_session() does not validate the device session id, allowing an invalid session id to cause out-of-bounds reads/writes in the session array and potential DoS. Public details modestly describe the impact as a denial of servic...

CVE-2015-2867

A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system...

Serendipity 2.0.2 Cross Site Scripting

Information -------------------- Advisory by Netsparker Name: XSS Vulnerability in Serendipity Affected Software : Serendipity Affected Versions: v2.0.2 and possibly below Vendor Homepage : http://www.s9y.org Vulnerability Type : Cross-site Scripting Severity : Important Status : Fixed CVE-ID :...

Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion Vulnerabilities

Audio Share version 2.0.2 suffers from cross site scripting and remote file inclusion vulnerabilities. | Title : Audio Share v2.0.2 Multi Vulnerability | Author : indoushka | email : email protected | Dork : Powered by AudioShareScript.com | Tested on: windows 8.1 Français V.Pro | Download :...

Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion

| Title : Audio Share v2.0.2 Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by AudioShareScript.com | Tested on: windows 8.1 Français V.Pro | Download : http://demo.audiosharescript.com/ ======================================= XSS / HTML Inject :...

Free Hosting Manager 2.0.2 - Multiple SQLi

No description provided by source. ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13 Vendors :...

ProQuiz 2.0.2 LFI / RFI / XSS / SQL Injection

Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: [email protected] Vendor Homepage: http://proquiz.softon.org/ Software Link: http://code.google.com/p/proquiz/downloads/list Tested on: Linux/Windows 1-...

ProQuiz 2.0.2 - Multiple Vulnerabilities

Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: [email protected] Vendor Homepage: http://proquiz.softon.org/ Software Link: http://code.google.com/p/proquiz/downloads/list Tested on: Linux/Windows 1-...

SMF Board v2.0.2 - Multiple Web Vulnerabilities

Title: ====== SMF Board v2.0.2 - Multiple Web Vulnerabilities Date: ===== 2012-06-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=596 VL-ID: ===== 624 Common Vulnerability Scoring System: ==================================== 4.1 Introduction: ============= Simple...

Mobile Chat v2.0.2 by Pass Vulnerability

Exploit for php platform in category web applications ======================================== Mobile Chat v2.0.2 by Pass Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Sandbox v2.0.2 Local FIle Inclusion Vulnerability

Exploit for php platform in category web applications ================================================= Sandbox v2.0.2 Local FIle Inclusion Vulnerability ================================================= : Tested on: Linux os : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.co...