Small CRM 3.0 is vulnerable to SQL Injection on it's admin login because of insufficient user supplied data sanitization and the sql injection payload being executed. Attacker is able to access the admin login panel and supply the malicious payload, successfully taking over admin account.
Stock Management System suffers from SQL injection in '/stock/php_action/changePassword.php' because it does not sanitize the input before pushing into the sql query. Leading to remote code execution. Vulnerable parameter: user_id=<injection point> SQLmap command: sqlmap -u http://<target_host>/stock/php_action/changePassword.php --data="password=invalidpassword&npassword=test&cpassword=test&user_id=1*" --cookie="PHPSESSID=<your cookie>" --is-dba Trick: We could steal the users cookie by chaining CSRF and stored XSS and then use the cookie to prefill the user_id parameter in the SQL injection.
COVID19 Testing Management System 1.0 is vulnerable to stored cross site scripting because of insufficient user supplied data sanitization. Anyone can submit a stored XSS payload without login when registering as a new user. This makes the application store our payload in the database and it is fired everything the dashboard is viewed.
An attacker can exploit a vulnerability in GLPI version < 9.4.6 to execute arbitrary code on the target system. The vulnerability is due to an insecure deserialization of user-supplied data in the 'wifinetworks' table. An attacker can exploit this vulnerability by downloading a SQL dump and finding the table offset for 'wifinetworks' with the 'cat' and 'grep' commands. The attacker can then update the offsettable value with this number in the create_dump function. The Nix/Win paths are based on defaults. The attacker can use curl -I <url> and use md5sum to find the path based on the Set-Cookie hash.
This vulnerability allows authenticated attackers to view other user's data by manpulating the value of contactSeqNumber
WEB//NEWS is prone to multiple SQL injection vulnerabilities due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. This could allow an attacker to inject malicious SQL code into the application, which could be used to compromise the application, disclose or modify data, or exploit vulnerabilities in the underlying database implementation.
SlimFTPd is prone to a remote denial of service vulnerability. This issue is due to a failure in the application to handle exceptional conditions. The problem presents itself during login. The application fails to handle malicious input in a proper manner resulting in a crash of the server, thus denying service to legitimate users.
Zorum is prone to an arbitrary command execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. This issue may facilitate unauthorized remote access in the context of the Web server to the affected computer.
Gravity Board X (GBX) is prone to an SQL injection vulnerability due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. An attacker can exploit this vulnerability by providing malicious input in the login field, such as ' or isnull(1/0) /*, and any password. This can result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
Lantronix Secure Console Server SCS820/SCS1620 devices are susceptible to multiple local vulnerabilities. The first issue is an insecure default permission vulnerability. Attackers may exploit this vulnerability to write data to arbitrary files with superuser privileges. Other attacks are also possible. The second issue is a directory traversal vulnerability in the command-line interface. Attackers may exploit this vulnerability to gain inappropriate access to the underlying operating system. The third issue is a privilege escalation vulnerability in the command-line interface. Local users with 'sysadmin' access to the device can escape the command-line interface to gain superuser privileges in the underlying operating system. The last issue is a buffer overflow vulnerability in the 'edituser' binary. Attackers may exploit this vulnerability to execute arbitrary machine code with superuser privileges.
Services By CQR