login-box vulnerabilities and exploits

(subscribe to this query)

The WP Login Box WordPress plugin up to and including 2.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example i...

Wp Login Box Project Wp Login Box

Cross-Site Request Forgery (CSRF) vulnerability in Danillo Nunes Login-box allows Stored XSS. This issue affects Login-box: from n/a up to and including 2.0.4.

Danillo Nunes Login-box

An issue in the user login box of LJCMS v1.11 allows malicious users to hijack user accounts via brute force attacks.

8cms Ljcms 1.11

An issue in the user login box of CSCMS v4.0 allows malicious users to hijack user accounts via brute force attacks.

Chshcms Cscms 4.0

TYPO3 prior to 4.2.13, 4.3.x prior to 4.3.4 and 4.4.x prior to 4.4.1 allows XSS and Open Redirection in the frontend login box.

Cross Site Scripting vulnerability in dcat-admin v.2.1.3 and before allows a remote malicious user to execute arbitrary code via a crafted script to the user login box.

Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input data. The parameters passed from the front end to the back end are controllable, which will lead to SQL injection.

Ladybirdweb Faveo Helpdesk

Cross-site scripting (XSS) vulnerability in swamp/action/LoginActions (aka the login box) in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote malicious users to inject arbitrary web script or HTML via the username parameter. NOTE: some o...

Novell Opensuse Swamp

Cross-site scripting (XSS) vulnerability in the Frontend Login Box (aka felogin) subcomponent in TYPO3 4.2.0 up to and including 4.2.6 allows remote malicious users to inject arbitrary web script or HTML via unspecified parameters.

Typo3 Typo3 4.2.0 Typo3 Typo3 4.2.1 Typo3 Typo3 4.2.2 Typo3 Typo3 4.2.4 Typo3 Typo3 4.2.5 Typo3 Typo3 4.2.6

The Backend subcomponent in TYPO3 4.0.13 and previous versions, 4.1.x prior to 4.1.13, 4.2.x prior to 4.2.10, and 4.3.x prior to 4.3beta2 allows remote authenticated users to determine an encryption key via crafted input to a tt_content form element.

Typo3 Typo3 Typo3 Typo3 0.1.2 Typo3 Typo3 1.0.14 Typo3 Typo3 1.1 Typo3 Typo3 1.1.1 Typo3 Typo3 1.1.09 Typo3 Typo3 1.1.10 Typo3 Typo3 1.2.0 Typo3 Typo3 1.3.0 Typo3 Typo3 1.3.2 Typo3 Typo3 3.0 Typo3 Typo3 3.3.x

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook