Rejetto HttpFileServer Remote Command Execution

No description provided by source. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Rejetto HttpFileServer Remote Command Execution", 'Description' = %q Rejetto HttpFileServer HFS i...

Rejetto HttpFileServer Remote Command Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 "Rejetto HttpFileServer Remote Command Execution", 'Description' = %q Rejetto HttpFileServer HFS is vulnerable to remote command...

Lanifex DMO <= 2.3b (_incMgr) Remote File Include Exploit

No description provided by source...

Cross site scripting

Cross-site scripting XSS vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary web script or HTML via the category parameter in a details action...

CVE-2010-4893

Cross-site scripting XSS vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary web script or HTML via the category parameter in a details action...

CVE-2010-4893

CVE-2010-4893 : XSS vulnerability in FestOS 2.3b, affecting foodvendors.php via the details action’s category parameter, allowing remote arbitrary web-script/HTML injection. The vulnerability is documented across multiple sources (NVD/NVD entry) with no publicly provided patch details in the conn...

festos CMS 2.3b - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | query$query; poc: in admin.php page: username: admin' or '1'='1 password: admin' or '1'='1 1.2- in festoszdologin.php: $query = "SELECT vendorID FROM ".$config'dbprefix'."vendors WHERE LCASEemail =...

FestOS 2.3 - contents Cross-Site Scripting

FestOS 2.3 - contents Cross-Site Scripting source: https://www.securityfocus.com/bid/41725/info FestOS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of...