Airport Koeln/Bonn - Blind SQL Injection Vulnerabilities

Document Title: =============== Airport Koeln/Bonn - Blind SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=174 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 17...

FTPRush v1.1.3 - Stack Buffer Overflow Vulnerability

Document Title: =============== FTPRush v1.1.3 - Stack Buffer Overflow Vulnerability References Source: ==================== http://www.youtube.com/watch?v=Fxr35RAcaUA Release Date: ============= 2011-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 54 Product & Servi...

Froxlor v0.10.16 CP - (Customer) Persistent Vulnerability

Document Title: =============== Froxlor v0.10.16 CP - Customer Persistent Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2241 Release Date: ============= 2020-11-12 Vulnerability Laboratory ID VL-ID: ====================================...

OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability

Document Title: =============== OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2234 Release Date: ============= 2020-05-05 Vulnerability Laboratory ID VL-ID: ====================================...

Folder Lock v3.4.5 iOS - Multiple Web Vulnerabilities

Document Title: =============== Folder Lock v3.4.5 iOS - Multiple Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2210 Release Date: ============= 2020-04-19 Vulnerability Laboratory ID VL-ID: ==================================== 221...

Subsonic v6.1.5 - Server Side Request Forgery & CSRF

Document Title: =============== Subsonic v6.1.5 - Server Side Request Forgery & CSRF References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2175 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20228 CVE-ID: ======= CVE-2018-20228 Release Date:...

Magento MarketPlace T1 - Bypass & Persistent Vulnerability

Document Title: =============== Magento MarketPlace T1 - Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1902 Release Date: ============= 2018-06-17 Vulnerability Laboratory ID VL-ID: ====================================...

Oracle AgileExpress v9.0 - Privilege Escalation Vulnerability

Document Title: =============== Oracle AgileExpress v9.0 - Privilege Escalation Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2114 Release Date: ============= 2018-01-16 Vulnerability Laboratory ID VL-ID:...

WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities

Document Title: =============== WpJobBoard v4.4.4 - Multiple SQL Injection Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1940 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5695 CVE-ID: ======= CVE-2018-5695 Release Date:...

TinyWebGallery v2.4 (TWGE) - Persistent XSS Vulnerability

Document Title: =============== TinyWebGallery v2.4 TWGE - Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1997 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16635...

Icecream v4.53 & Pro - File Permission Privilege Escalation

Document Title: =============== Icecream v4.53 & Pro - File Permission Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2058 Release Date: ============= 2017-04-27 Vulnerability Laboratory ID VL-ID: ==================================...

Cisco Webex Meeting - Open Redirect Web Vulnerability

Document Title: =============== Cisco Webex Meeting - Open Redirect Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1950 PSIRT ID: 1079904098 Bulletin:...

Huawei Flybox B660 - (POST Reboot) CSRF Vulnerability

Document Title: =============== Huawei Flybox B660 - POST Reboot CSRF Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2025 Release Date: ============= 2017-01-10 Vulnerability Laboratory ID VL-ID: ==================================== 2025...

Burden TMA v2.1.1 - (Task) Persistent Web Vulnerability

Document Title: =============== Burden TMA v2.1.1 - Task Persistent Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1998 Release Date: ============= 2016-11-26 Vulnerability Laboratory ID VL-ID: ==================================== 199...

Flash Operator Panel 2.31.03 - Multiple Web Vulnerabilities

Document Title: =============== Flash Operator Panel 2.31.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1906 Release Date: ============= 2016-10-21 Vulnerability Laboratory ID VL-ID: ===================================...

FortiManager & FortiAnalyzer - Persistent Vulnerability

Document Title: =============== FortiManager & FortiAnalyzer - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1687 Fortinet PSIRT ID: 1624561 Bulletin:...

Webline CMS (2016Q2) - SQL Injection Vulnerability

Document Title: =============== Webline CMS 2016Q2 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1823 Release Date: ============= 2016-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 1823 Comm...

VoHo Concept4E CMS v1.0 - SQL Injection Vulnerabilities

Document Title: =============== VoHo Concept4E CMS v1.0 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1816 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID: ==================================== 18...

Investors Application - Client Side Cross Site Vulnerability

Document Title: =============== Investors Application - Client Side Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1540 Facebook Security ID: 246414938 Release Date: ============= 2016-02-12 Vulnerability Laboratory ID VL-ID:...

SimpleView CRM - Client Side Open Redirect Vulnerability

Document Title: =============== SimpleView CRM - Client Side Open Redirect Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1668 Release Date: ============= 2016-02-02 Vulnerability Laboratory ID VL-ID: ====================================...

WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability

Document Title: =============== WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1681 Release Date: ============= 2016-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 168...

PayPal Notify - Cross Site Request Forgery Vulnerability

Document Title: =============== PayPal Notify - Cross Site Request Forgery Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1584 Video: https://www.youtube.com/watch?v=1NO4I28J-0s Release Date: ============= 2015-08-25 Vulnerability Laboratory ID VL-ID:...

Blueberry Express v5.9.x - Buffer Overflow Vulnerability

Document Title: =============== Blueberry Express v5.9.x - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1535 Video: http://www.vulnerability-lab.com/getcontent.php?id=1537 Release Date: ============= 2015-06-28...

Ebay Magento Bug Bounty #10 - Persistent Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 10 - Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1457 eBay Inc. Bug Bounty Program ID: EIBBP-31603 Video: https://www.youtube.com/watch?v=WffsHd8pibE Release Date:...

Ebay Magento Bug Bounty #17 - CS Cross Site Vulnerability

Document Title: =============== Ebay Magento Bug Bounty 17 - CS Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1473 EIBBP-31541 Release Date: ============= 2015-06-15 Vulnerability Laboratory ID VL-ID:...

Cisco (Newsroom) - CS Cross Site Scripting Vulnerability

Document Title: =============== Cisco Newsroom - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1464 Release Date: ============= 2015-04-24 Vulnerability Laboratory ID VL-ID: ==================================== 146...

Ebay Inc Xcom #7 - (Policy) Persistent Vulnerability

Document Title: =============== Ebay Inc Xcom 7 - Policy Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1228 Release Date: ============= 2015-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1228...

Heroku API Bug Bounty - Persistent Invitation Vulnerability

Document Title: =============== Heroku API Bug Bounty - Persistent Invitation Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1300 Video: http://www.vulnerability-lab.com/getcontent.php?id=1335 BugCrowd ID:...

Barracuda Firewall 6.1.5 - Bypass&Persistent Vulnerabilities

Document Title: =============== Barracuda Firewall 6.1.5 - Bypass&Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1065 Barracuda Networks Security ID BNSEC: BNSEC-2067...

Microsoft MSRC RSS ASPX - CS Cross Site Web Vulnerability

Document Title: =============== Microsoft MSRC RSS ASPX - CS Cross Site Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1026 Microsoft Security Response Center MSRC ID: 15180 Video: http://www.vulnerability-lab.com/getcontent.php?id=102...

Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities

Document Title: =============== Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=727 Note: The issue was part of the official Barracuda Networks Bug Bounty Program. Release Date: =============...

Skype Community - Mail Encoding Web Vulnerability

Document Title: =============== Skype Community - Mail Encoding Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=800 MSRC ID: 13493 Release Date: ============= 2013-02-21 Vulnerability Laboratory ID VL-ID:...

Skype Account Service - Reset (Session) Vulnerability

Document Title: =============== Skype Account Service - Reset Session Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=720 MSRC ID: 13050bc News:...

Skype Account Service - Session Token Bypass Vulnerability

Document Title: =============== Skype Account Service - Session Token Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=762 http://www.vulnerability-lab.com/getcontent.php?id=739 MSRC ID: 13175 Release Date: ============= 2012-11-14...

Axis VoIP Manager v2.1.5.7 - Multiple Web Vulnerabilities

Document Title: =============== Axis VoIP Manager v2.1.5.7 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=686 Release Date: ============= 2012-08-16 Vulnerability Laboratory ID VL-ID: ==================================== 6...

Electronic Arts - Cross Site Scripting Vulnerability

Document Title: =============== Electronic Arts - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=367 Release Date: ============= 2012-02-05 Vulnerability Laboratory ID VL-ID: ==================================== 367...

Kaspersky IS&AV 2012 - Memory Corruption Vulnerability

Document Title: =============== Kaspersky IS&AV 2012 - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=129 http://www.vulnerability-lab.com/getcontent.php?id=19 Release Date: ============= 2011-12-18 Vulnerability Laborato...

China Council of Promo INT Trade - Critical Vulnerabilities

Document Title: =============== China Council of Promo INT Trade - Critical Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=319 Release Date: ============= 2011-09-24 Vulnerability Laboratory ID VL-ID: ====================================...

Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability

Document Title: =============== Skype 5.3.x 2.2.x 5.2.x - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=182 CNNVD-201110-709 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100709 Release Date: =============...

Strato Server ACP - Persistent DOM XSS Vulnerabilities

Document Title: =============== Strato Server ACP - Persistent DOM XSS Vulnerabilities Release Date: ============= 2011-08-24 Vulnerability Laboratory ID VL-ID: ==================================== 141 Product & Service Introduction: =============================== Control Panel of Strato Hosting...

ClusterMaps - Cross Site Scripting Vulnerability

Document Title: =============== ClusterMaps - Cross Site Scripting Vulnerability Release Date: ============= 2011-07-25 Vulnerability Laboratory ID VL-ID: ==================================== 135 Product & Service Introduction: =============================== Do you know your audience? You will...

IW Gallery v3.5 - Multiple SQL Injection Vulnerabilities

Document Title: =============== IW Gallery v3.5 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-06-27 Vulnerability Laboratory ID VL-ID: ==================================== 209 Product & Service Introduction: =============================== Galleria fotografica in ASP c...

DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities

Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2195 Release Date: ============= 2020-04-08 Vulnerability Laboratory ID VL-ID: ===================================...

NetChat v7.8 - Persistent Cross Site Scripting Vulnerability

Document Title: =============== NetChat v7.8 - Persistent Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2171 Video: https://www.vulnerability-lab.com/getcontent.php?id=2174...

Shopify - Persistent XML Cross Site Scripting Vulnerability

Document Title: =============== Shopify - Persistent XML Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=1983 Video: https://www.youtube.com/watch?v=LDiXveqQ0gg Release Date: ============= 2018-07-17 Vulnerability Laboratory ID VL-ID:...

ReleaseWire - (Groups) Persistent Cross Site Vulnerability

Document Title: =============== ReleaseWire - Groups Persistent Cross Site Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2128 View Video: https://www.youtube.com/watch?v=LFZXKzkmmxA Release Date: ============= 2018-06-18 Vulnerability Laboratory ID VL-I...

Oracle Flex Cube Direct BA v10.5 - Cross Site Vulnerability

Document Title: =============== Oracle Flex Cube Direct BA v10.5 - Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2101 Release Date: ============= 2017-10-31 Vulnerability Laboratory ID VL-ID: ==================================...

Microsoft Resnet - DNS Configuration Web Vulnerability

Document Title: =============== Microsoft Resnet - DNS Configuration Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2087 Acknowledgements: https://technet.microsoft.com/en-us/security/cc308589.aspx Release Date: ============= 2017-08-...

PayPal Inc BB #149 - (Gift) Insufficient Authentication

Document Title: =============== PayPal Inc BB 149 - Gift Insufficient Authentication References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1973 ID EIBBP-34368 Release Date: ============= 2017-06-20 Vulnerability Laboratory ID VL-ID:...

Wordpress Contentive Theme - Cross Site Web Vulnerability

Document Title: =============== Wordpress Contentive Theme - Cross Site Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2065 Release Date: ============= 2017-05-23 Vulnerability Laboratory ID VL-ID: ====================================...