892 matches found
Splunk 4.0 - 4.1.2 XSS Vulnerability
Splunk is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:splunk";...
Splunk 4.x < 4.1.3 404 Response XSS
The version of Splunk Web hosted on the remote web server is affected by a cross-site scripting vulnerability due to a failure to sanitize the contents of the HTTP 'Referer' header before using it in HTTP error 404 messages. An unauthenticated, remote attacker can exploit this issue to inject...
CVE-2010-2429
Cross-site scripting XSS vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response...
Cross site scripting
Cross-site scripting XSS vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response...
Reading Apache CustomLogfiles - Windows
Reading Apache CustomLogfiles SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.96022";...
Jira Atlassian File Attachment Download
Exploit for multiple platform in category web applications ======================================= Jira Atlassian File Attachment Download ======================================= Exploit Title: Jira Atlassian Date: 28/3/2010 Author: Ignacio Garrido Mail: Ign.sec gmail com Software Link:...
HTTP Interesting File Scanner
This module identifies the existence of interesting files in a given directory path. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Interesting File Scanner', 'Description' = %q This modu...
Yoast GA 3.2.4 Plugin for WP XSS
No description provided by source. Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links, links within comments, blogroll links and downloads. It also allows you to track AdSense clicks, add extra search engine...
WordPress Yoast GA 3.2.4 Plugin XSS
Exploit for unknown platform in category web applications ================================ Yoast GA 3.2.4 Plugin for WP XSS ================================ Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links...
Apache Tomcat 404错误页跨站脚本漏洞
Bugraq ID: 37149 Apache Tomcat是一款开放源码的JSP应用服务器程序。 Apache Tomcat不正确过滤用户输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 由于不正确处理404错误页面，在返回给用户后，可导致恶意脚本代码在目标浏览器上执行，泄漏敏感信息。 Apache Software Foundation Tomcat 3.2.1 Apache Software Foundation Tomcat 3.2 Apache Software Foundation Tomcat 3.1.1 Apache Software Foundation...
Apache Tomcat 3.2.1 - 404 Error Page Cross-Site Scripting
Apache Tomcat is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...
Cross-Site Scripting vulnerability in ProofReader for Joomla
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в компоненте ProofReader comproofreader для Joomla. Уязвимость на страницах с 404 ошибкой и на существующих страницах сайта. Это DOM Based XSS. XSS IE: http://site/1";alertdocument.cookie;//...
TwonkyMedia Server <= 4.4.17, 5.0.65 xss
Exploit for unknown platform in category web applications ======================================== TwonkyMedia Server = 4.4.17, 5.0.65 xss ======================================== =========================================================================== Title: TwonkyMedia Server Multiple...
Cross-Site Scripting vulnerability in Joomla
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе Joomla. XSS: http://site/3Cscript3Ealertdocument.cookie3C/script3E Уязвимость на странице с ошибкой 404. Уязвимы версии Joomla 1.5.x. Версия Joomla 1.5.12 уже не уязвима. Дополнительная информация о данной...
PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Delete Arbitrary File Vulnerability Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowDelete = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND...
PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete
PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete !/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or...
Pixaria Gallery 2.3.5 (file) Remote File Disclosure Exploit
Exploit for unknown platform in category web applications =========================================================== Pixaria Gallery 2.3.5 file Remote File Disclosure Exploit =========================================================== ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . ...
Project Woodstock 404 Error Page UTF-7 Encoded XSS
The remote web server contains a web application built using Woodstock components, which are user interface components for the web- based on Java Server Faces and AJAX. Woodstock is part of Sun Glassfish Enterprise Server and can also be used with other Java web containers, such as JBoss, Tomcat,...
CVE-2009-1554
Cross-site scripting XSS vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATHINFO, which is displayed on the 404 error page, as...
[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability
Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...