high-tech bridge sa vulnerabilities and exploits

(subscribe to this query)

760

VMScore

Multiple SQL injection vulnerabilities in the admin panel in osCMax prior to 2.5.1 allow (1) remote malicious users to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or (2) remote administrators to execute arbitrary SQL commands v...

Oscmax Oscmax

2 EDB exploits

440

VMScore

Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x prior to 1.12.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) name parameter to modules.php or (2) img_url to includes/wysiwyg/spaw/editor/plugins/imgpopup/img_popup.php.

Pragmamx Pragmamx

2 EDB exploits

510

VMScore

Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote malicious users to read arbitrary files via a ..%5c (dot dot encoded backslash) in a GET request.

Twilightcms Twilight Cms 5.17

2 EDB exploits

755

VMScore

SQL injection vulnerability in the check_banlist function in includes/sessions.php in Enano CMS 1.1.7pl1; 1.0.6pl2; and possibly other versions prior to 1.1.8, 1.0.6pl3, and 1.1.7pl2 allows remote malicious users to execute arbitrary SQL commands via the email parameter to index....

1 EDB exploit

435

VMScore

Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote malicious users to inject arbitrary web script or HTML via the (1) post_content parameter to post/edit/2/p1.html, related to views/post.php; the (2) slogan parameter to admin/site/2.html, related to...

Diferior Diferior 8.03

1 EDB exploit

755

VMScore

Multiple SQL injection vulnerabilities in Eclime 1.1.2b allow remote malicious users to execute arbitrary SQL commands via the (1) ref or (2) poll_id parameter to index.php, or the (3) country parameter to create_account.php.

Eclime Eclime 1.1.2b

1 EDB exploit

435

VMScore

Cross-site scripting (XSS) vulnerability in login.php in Eclime 1.1.2b allows remote malicious users to inject arbitrary web script or HTML via the reason parameter in a fail action.

Eclime Eclime 1.1.2b

1 EDB exploit

435

VMScore

Cross-site scripting (XSS) vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote malicious users to inject arbitrary web script or HTML via the post-title parameter.

Get-simple Getsimple Cms 2.01

1 EDB exploit

755

VMScore

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote malicious users to execute arbitrary SQL commands via the gender parameter.

Bloofox Bloofoxcms 0.3.5

1 EDB exploit

Get Started

« PREV 1 2 3 4 5 6 7 8 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook