PT-2017-18877

Name of the Vulnerable Software and Affected Versions Telaxus EPESI versions 1.8.2 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted tab name parameter in the modules/Base/Dashboard/Dashboard 0.php file. This is a Stored Cross-site...

PT-2017-18847

Name of the Vulnerable Software and Affected Versions Telaxus EPESI versions 1.8.2 and earlier Description The issue concerns a Stored Cross-site Scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description...

Useresponse 1.0.2 - Privilege Escalation / Remote Code Execution

!/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles @bclose and mrme @netninja exploit by...

CVE-2007-4937: Undefined Security Weakness

CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name and MD5 password hash via a direct request for base/usr/0.php...

CVE-2005-1444: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to inject arbitrary web script or HTML via 1 the v, show, or secname parameters to main.php, 2 the inadmin, newsev, or postid parameters to 5.php, or 3 the id parameter to 0.php...