CVE-2015-3272

CVE-2015-3272 describes an open redirect vulnerability in Moodle’s lib/moodlelib.php: the clean_param function can be abused to redirect users to arbitrary sites via an HTTP Referer header that matches a local URL substring. Affected Moodle versions are up to 2.6.11, and 2.7.x before 2.7.9, 2.8.x...

http-vuln-cve2013-6786 NSE Script

Detects a URL redirection and reflected XSS vulnerability in Allegro RomPager Web server. The vulnerability has been assigned CVE-2013-6786. The check is general enough script tag injection via Referer header that some other software may be vulnerable in the same way. See also:...

CVE-2015-7929

eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

ClipperCMS 'Referer Check' Cross-Site Request Forgery Vulnerability

ClipperCMS is a content management system CMS. A cross-site request forgery vulnerability exists in ClipperCMS. A remote attacker could exploit this vulnerability to perform unauthorized actions and gain access to the affected application...

ClipperCMS 1.3.0 Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: ClipperCMS 1.3.0 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: http://www.clippercms.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 10/02/2015 Disclosed to public: 11/13/2015 Relea...

Design/Logic Flaw

IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history...

HTTP GET Request Invalid 'Referer' Header Detection

Binary data 8998.prm...

HTTP GET Valid 'Referer' Request Header Detection

Binary data 9002.prm...

HTTP 'Referer' Request Header Detection

Binary data 8999.prm...

HTTP GET Without 'Referer' Request Header Detection

Binary data 8997.prm...

dedecms referer xss跨站

简要描述： dedecms 全版本！xss跨站一枚! referer构造触发！ 详细说明： 文件：/plus/vote.php code 区域 $ENVGOBACKURL = empty$SERVER'HTTPREFERER' ? '':$SERVER'HTTPREFERER'; ............................................ //判断是否允许被查看 $admin = new userLogin; if$dopost == 'view' if$row'view' == 1 && empty$admin-userName...

ownCloud: apps.owncloud.com: Referer protection Bypassed

@herlove has reported a vulnerability within the appstore at apps.owncloud.com allowing an adversary to bypass the HTTP referer based CSRF protection. This issue was caused by an insufficient regular expression which has been patched meanwhile. On request of the reporter this issue has been...

WordPress Welcart plugin cross-site scripting vulnerability (CNVD-2015-05021)

WordPress is a set of WordPress Software Foundation blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site.Welcart is one of the e-commerce plug-ins. A cross-site scripting vulnerability exists in versions of the WordPress...

Flox: Content spoofing through Referel header

I found content spoofing/ text injection through referel header Steps to reproduce: whenever you came to this page https://flox.io/404/ You'll see an error message like 404: Baaah! Nothing existed there, so now you’re here. You appear to be a traveller from a distant land. From googling I found a...

WordPress Music Store 1.0.14 Open Redirect

Title: Open Redirect Vulnerability in Music Store Wordpress Plugin v1.0.14 Submitter: Nitin Venkatesh Product: Music Store Wordpress Plugin Product URL: https://wordpress.org/plugins/music-store/ Vulnerability Type: URL Redirection to Untrusted Site 'Open Redirect' CWE-601 Affected Versions:...

Welcart vulnerable to cross-site scripting

Overview Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site scripting CWE-79 vulnerability due to the processing of uscesreferer parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the...

Zaption: Using GET method for account login with CSRF token leaking to external sites Via Referer.

HI At the time of login, the values are present in URL along with the CSRF token. Also this URL is leaking to external sites in HTTP REFRERER. Here are some of those sites: dxzc9stvaxhhy.cloudfront.net bam.nr-data.net ssl.google-analytics.com usage.trackjs.com api.mixpanel.com...

NewStatPress <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)

An insufficient user input validation of HTTP-Header: "Referer" results in a persistent XSS in the WordPress admin-panel. An attacker may be able to access any cookies, session tokens or other sensitive information retained by the browser and used with that site...

Endian Firewall 3.0.0 - OS Command Injection (Python)

Endian Firewall 3.0.0 - OS Command Injection Python !/usr/bin/env python Endian Firewall Proxy User Password Change /cgi-bin/chpasswd.cgi OS Command Injection Exploit POC Reverse TCP Shell Ben Lincoln, 2015-06-28 http://www.beneaththewaves.net/ Requires knowledge of a valid proxy username and...

Fiyo CMS 2.0_1.9.1 SQL Injection

Exploit Title: Fiyo CMS multiple SQL vulnerability Date: 2015-06-28 Exploit Author: cfreer poc-lab Vendor Homepage: http://www.fiyo.org/ Software Link: http://tcpdiag.dl.sourceforge.net/project/fiyo-cms/Fiyo%202.0/fiyocms2.0.2.zip Version: 2.01.9.1 Tested on: Apache/2.4.7 Win32 CVE : CVE-2015-393...