72 matches found
CVE-2020-14054
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
CVE-2020-14054
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
Sql injection
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
CVE-2020-14054
The CVE-2020-14054 vulnerability affects SOKKIA GNR5 Vanguard WEB (version 1.2, build 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3) and hardware version 212. A SQL injection vulnerability in the login page’s User Name/Password fields could allow remote attackers to bypass administrator authentication...
CVE-2020-14054
SOKKIA GNR5 Vanguard WEB version 1.2 build: 91f2b2c3a04d203d79862f87e2440cb7cefc3cd3 and hardware version 212 allows remote attackers to bypass admin authentication via a SQL injection attack that uses the User Name or Password field on the login page...
Vanguard 2.1 Cross Site Scripting
Exploit Title: Vanguard 2.1 Multi XSS Vunlerabilities Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/vanguard-marketplace-digital-products-php/20287975 Version: 2.1 Tested on: 5.4.0-4parrot1-amd64...
Vanguard <= 2.1 - Multiple Cross-Site Scripting (XSS)
The plugin does not sanitise, validate or escape some of its parameters before outputting the back in various place, leading to either Stored or Reflected Cross-Site Scripting issues PoC Put the following payload in the In Products Search box: " POST /search HTTP/1.1 Accept:...
Vanguard <= 2.1 - Multiple Cross-Site Scripting (XSS)
The plugin does not sanitise, validate or escape some of its parameters before outputting the back in various place, leading to either Stored or Reflected Cross-Site Scripting issues Put the following payload in the In Products Search box: " POST /search HTTP/1.1 Accept:...
The Story of Sandworm, the Kremlin's Most Dangerous Hackers
For three years, WIRED has tracked the elite and shadowy Russian vanguard of cyberwar...
vanguardministries.org XSS vulnerability
Open Bug Bounty ID: OBB-608882 Description| Value ---|--- Affected Website:| vanguardministries.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SQL Injection Vulnerability in Vanguard Digitizing System
Vanguard Digital Technology Inc. provides web animation, graphic visual design, online advertising and marketing, and multimedia CD-ROM production services. A SQL injection vulnerability exists in the Vanguard Digital Web Building System. An attacker can exploit the vulnerability to obtain...
Vanguard Marketplace Digital Products PHP Cross Site Scripting Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A cross-site scripting vulnerability exists in Vanguard Marketplace Digital Products PHP. A remote attacker can exploit this vulnerability by sending the 'phpsquery'...
Vanguard Marketplace Digital Products PHP Cross-Site Request Forgery Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A cross-site request forgery vulnerability exists in Vanguard Marketplace Digital Products PHP. A remote attacker can use /search to inject web script or HTML or perfo...
Vanguard Marketplace Digital Products PHP SQL Injection Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A SQL injection vulnerability exists in Vanguard Marketplace Digital Products PHP version 1.4. A remote attacker can inject SQL commands by sending PATHINFO to the /p...
Vanguard Marketplace Digital Products PHP Arbitrary File Upload Vulnerability
Vanguard Marketplace Digital Products PHP is a set of PHP-based scripts for online trading sites for MP3 and other digital files. A security vulnerability exists in Vanguard Marketplace Digital Products PHP version 1.4. The vulnerability can be exploited to upload arbitrary files via the Add New...
CVE-2017-17936
Vanguard Marketplace Digital Products PHP has CSRF via /search...
CVE-2017-17937
Vanguard Marketplace Digital Products PHP has XSS via the phpsquery parameter to /search...
Design/Logic Flaw
Vanguard Marketplace Digital Products PHP has XSS via the phpsquery parameter to /search...