132 matches found
wb-aktuell.de Improper Access Control vulnerability OBB-2408823
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
wb-agent.de Improper Access Control vulnerability OBB-2403400
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
org.hibernate:hibernate-c3p0 (4.2.0.sp1), org.hibernate:hibernate-ehcache (4.2.0.sp1) +6 more potentially affected by CVE-2019-14900 via org.hibernate:hibernate-core (4.2.0.sp1)
org.hibernate:hibernate-core MAVEN version 4.2.0.sp1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-core and may be impacted: - org.hibernate:hibernate-c3p0 4.2.0.sp1 - org.hibernate:hibernate-ehcache 4.2.0.sp1 -...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the komedawbconnectoradd function drivers/gpu/drm/arm/display/komeda/komedawbconnector.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a hacker to cause service failures...
Linux kernel memory leak vulnerability (CNVD-2019-40151)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in the komedawbconnectoradd function in...
PT-2014-8898
Name of the Vulnerable Software and Affected Versions WebsiteBaker version 2.8.3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the QUERY STRING to "wb/admin/admintools/tool.php" or the section id parameter to several files in the...
CVE-2014-9243: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary web script or HTML via the 1 QUERYSTRING to wb/admin/admintools/tool.php or 2 sectionid parameter to editmodulefiles.php, 3 news/addpost.php, 4 news/modifygroup.php, 5...
Unicorn WB-3300NR routers crossite scripting
Crossite scripting in Web interface...
Unicorn WB-3300NR Cross Site Request Forgery Vulnerability
Unicorn WB-3300NR router version 1 with firmware 5.07.18koUIS02 suffers from multiple cross site request forgery vulnerabilities. Exploit Title: Unicorn Router WB-3300NR CSRF Factory Reset/DNS Change Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: October 29th 2013 Vendor...
Unicorn WB-3300NR Cross Site Request Forgery
Exploit Title: Unicorn Router WB-3300NR CSRF Factory Reset/DNS Change Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: October 29th 2013 Vendor Homepage: http://www.eunicorn.co.kr/kimsboard7/product.php?inc=wb-3300nr Tested on: Unicorn WB-3300NR v1.0 Firmware Version:...
CVE-2011-5203: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in WB/Default.asp in Akiva WebBoard before 8 SR 1 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information...
PT-2012-2180
Name of the Vulnerable Software and Affected Versions Akiva WebBoard versions prior to 8 SR 1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the name parameter in the WB/Default.asp file. Recommendations For versions prior to 8 SR 1, update t...
Webmobo WB News System - Blind SQL Injection
Webmobo WB News System - Blind SQL Injection Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable...
Webmobo WB News System - Blind SQL Injection
Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page: index.php Example:...
Webmobo WB News System Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input...
MidiCMS-WB 2011 Shell Upload / Local File Inclusion
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
MidiCMS-WB (2011) Multiple Vulnerabilities
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CVE-2009-4927
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...
Authentication flaw
WB News 2.1.2 allows remote attackers to bypass authentication and gain administrative access via a modified WBNEWS cookie, as demonstrated by setting this cookie to 1...
