PT-2026-114974

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common name field accepts path traversal sequences and openvpn csc conf write concatenates the value into /var/etc/openvpn-csc// without normalization or a basename check. The...

MantisBT <=2.30 - Arbitrary Password Reset/Admin Access Detection

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php. !/usr/bin/env python3 -- coding: utf-8 -- """MantisBT through 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

EUVD-2018-2032

Malware in sbrugna...

EUVD-2019-6517

Malware in sbrugna...

MantisBT allows arbitrary password reset

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php...

CVE-2019-15533

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php...

Sql injection

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php...

CVE-2019-15533

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php...

CVE-2019-15533

XENFCoreSharp (pre-2019-07-16) is affected by CVE-2019-15533: it allows SQL injection in web/verify.php. The connected documents confirm the vulnerable component and input point but do not provide exploit specifics, affected version ranges beyond the date, or remediation details in the supplied s...

PT-2019-14250

Name of the Vulnerable Software and Affected Versions XENFCoreSharp versions prior to 2019-07-16 Description The issue allows SQL injection in the web/verify.php file. Recommendations For versions prior to 2019-07-16, update to a version released after 2019-07-16 to resolve the issue...

CVE-2019-15533: Improper Neutralization of Special Elements used in an SQL Command

XENFCoreSharp before 2019-07-16 allows SQL injection in web/verify.php...

CVE-2018-1000841

Zend.To version Prior to 5.15-1 contains a Cross Site Scripting XSS vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code in the context of the victim's browser.. This attack appear to be exploitable via HTTP POST request. This vulnerability...

CVE-2018-1000841: Improper Neutralization of Input During Web Page Generation

Zend.To version Prior to 5.15-1 contains a Cross Site Scripting XSS vulnerability in The verify.php page that can result in An attacker could execute arbitrary Javascript code in the context of the victim's browser.. This attack appear to be exploitable via HTTP POST request. This vulnerability...

PT-2018-9565

Name of the Vulnerable Software and Affected Versions Zend.To versions prior to 5.15-1 Description The issue allows an attacker to execute arbitrary Javascript code in the context of the victim's browser due to a Cross Site Scripting XSS vulnerability in the verify.php page. This can be exploited...

CVE-2017-7615

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php...

CVE-2017-7615: Weak Password Recovery Mechanism for Forgotten Password

MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirmhash value to verify.php...

PT-2017-17844 · Mantisbt · Mantisbt

Name of the Vulnerable Software and Affected Versions: MantisBT versions prior to 2.3.1 Description: The issue allows for arbitrary password reset and unauthenticated admin access. This is achieved by providing an empty confirm hash value to the "verify.php" endpoint. Recommendations: For version...

PT-2014-6488

Name of the Vulnerable Software and Affected Versions php-sqrl affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the message parameter in the sqrl verify.php file. Recommendations At the moment, there is no...

Fluger Edit 2 Blind SQL Injection / Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ===================================================== Vulnerable Software: Fluger Edit v.2 || administration software Vendor: http://www.fluger.com/ Software License: Commercial Vulnerabilities: Blind SQL Injection And XSS Tested: In Wild...

Sql injection

Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 answer parameter to admincp/verify.php, 2 extension parameter in an edit action to admincp/attachmentpermission.php, and the 3 iperm parameter to...