manuel lopez vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote malicious users to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.

Expinion.net News Manager Lite 2.5

3 EDB exploits

Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote malicious users to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.

Expinion.net News Manager Lite 2.5

3 EDB exploits

Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote malicious users to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (...

Maxwebportal Maxwebportal 1.30 Maxwebportal Maxwebportal 1.31

2 EDB exploits

SQL injection vulnerability in Member Management System 2.1 allows remote malicious users to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.

2 EDB exploits

Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote malicious users to inject arbitrary web script or HTML via (1) the err parameter to error.asp or (2) register.asp.

2 EDB exploits

The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and previous versions allows remote malicious users to read arbitrary messages by modifying the id parameter.

Openbb Openbb 1.0 .0 Rc1 Openbb Openbb 1.0 .0 Rc2 Openbb Openbb 1.0 .0 Beta1 Openbb Openbb 1.0 .0 Rc3 Openbb Openbb 1.0 .5 Openbb Openbb 1.0 .6

1 EDB exploit

News Manager Lite 2.5 allows remote malicious users to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.

1 EDB exploit

SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote malicious users to gain privileges via the catcode parameter.

Alan Ward A-cart 2.0

2 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook