VMPanel 2.7.4 - SQL Injection Web Vulnerability

Exploit for php platform in category web applications ===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System...

VMPanel 2.7.4 SQL Injection

===================================================== Exploit Title : VMPanel 2.7.4 - SQL Injection Web Vulnerability Author : Esmaeil Rahimian Date Discovered : 2016-12-07 Affected Products: VMPanel v2.7.4 - Content Management System Exploitation Technique: Remote Severity Level: Medium Tested O...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2016-12641)

IBM Jazz Reporting Service is a solution for integrating data. An unspecified cross-site scripting attack vulnerability exists in IBM Jazz Reporting Service that stems from a failure to properly validate user input. An attacker could use this vulnerability to execute arbitrary scripts in an...

VMPanel 2.7.4 - SQL Injection Web Vulnerability

Document Title: =============== VMPanel 2.7.4 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2022 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 2022 Comm...

VMPanel 2.7.4 - SQL Injection Web Vulnerability

Document Title: =============== VMPanel 2.7.4 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2022 Release Date: ============= 2016-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 2022 Comm...

shape.hu XSS vulnerability

Vulnerable URL: http://www.shape.hu/keres/%22%3E%3Csvg%20onload=alert'OPENBUGBOUNTY'%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1332224 VIP website status:| No Check shape.hu SSL connection:| Grade: A...

Multiple cross-site scripting vulnerabilities in phpMyAdmin (CNVD-2016-11906)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. Multiple cross-site scripting vulnerabilities exist ...

Cross-site scripting vulnerability in Drupal plugin lyris

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal plugin lyris. The program fails to filter user-supplied input, allowing an attacker to construct a malicious web...

Burden TMA v2.1.1 - (Task) Persistent Web Vulnerability

Document Title: =============== Burden TMA v2.1.1 - Task Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1998 Release Date: ============= 2016-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 199...

Burden TMA 2.1.1 Cross Site Scripting

Document Title: =============== Burden TMA v2.1.1 - Task Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1998 Release Date: ============= 2016-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 199...

Koken 0.22.7 / 0.22.11 Cross Site Scripting

| \ | | / | | | | | | | | | | | | ' \ / \ \ / / | | | | || | | | | | | / |/ ,|| ||// || Document Title: =============== Koken 0.22.7 & 0.22.11 Multiple Web Vulnerabilities Credits & Authors: ================== TaurusOmar - @TaurusOmar [email protected] taurusomar.buhosec.com Release...

U.S. Dept Of Defense: Reflected XSS on a DoD website

A cross-site scripting vulnerability was found on a Department of Defense website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. @juliocesar was able to demonstrate this vulnerability by crafting a...

EditMe CMS - Cross-Site Request Forgery (Add Admin)

EditMe CMS - Cross-Site Request Forgery Add Admin Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory...

EditMe CMS - Cross-Site Request Forgery (Add Admin)

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

EditMe CMS - CSRF Privilege Escalate Web Vulnerability

Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory ID VL-ID: ==================================== 19...

CG-WLR300NX vulnerable to cross-site scripting

Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX contains a cross-site scripting vulnerability CWE-79. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

Dedecms CSRF Vulnerability

Dedecms is an open source PHP open source website management system. Dedecms has a CSRF vulnerability that allows an attacker to exploit the vulnerability to perform unauthorized operations as an administrator and delete the account of any user...

Schoolhos CMS 2.29 - 'kelas' SQL Injection

Document Title: =============== Schoolhos CMS v2.29 - kelas Data Siswa SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1931 Release Date: ============= 2016-11-07 Vulnerability Laboratory ID VL-ID:...

Exponent CMS SQL Injection Vulnerability (CNVD-2016-10699)

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in th...