Facebook Clone Script 1.0.5 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul...

Facebook Clone Script 1.0.5 Cross Site Scripting

Exploit Title: Facebook Clone Script 1.0.5 - Stored XSS Date: 07.02.2018 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/naukri-clone-script/ Category: Web Application Exploit Author: Prasenjit Kanti Paul Web: http://hack2rule.wordpress.com/...

CVE-2016-6858

Cross-site scripting XSS vulnerability in the Create Employee feature in Hybris Management Console HMC in SAP Hybris before 5.0.4.11, 5.1.0.x before 5.1.0.11, 5.1.1.x before 5.1.1.12, 5.2.0.x and 5.3.0.x before 5.3.0.10, 5.4.x before 5.4.0.9, 5.5.0.x before 5.5.0.9, 5.5.1.x before 5.5.1.10, 5.6.x...

CVE-2016-6858

CVE-2016-6858 is a cross-site scripting (XSS) vulnerability in the SAP Hybris Management Console (HMC) Create Employee feature. The issue affects SAP Hybris releases listed as vulnerable (e.g., 5.0.4.11, 5.1.0.x before 5.1.0.11, 5.1.1.x before 5.1.1.12, 5.2.0.x and 5.3.0.x before 5.3.0.10, 5.4.x ...

CVE-2015-6858

HP Insight Control Server Provisioning (HP) is affected by CVE-2015-6858 due to a vulnerability in the RabbitMQ component used by the server provisioning feature prior to version 7.5.0. The issue enables remote attackers to obtain sensitive information via unspecified vectors. The provided docume...

CVE-2015-6858

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2014-6858

CVE-2014-6858 affects The Mostafa Shemeas Android app (1.0). The vulnerability is that it does not verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. According to the sources, this le...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6858. Reason: This candidate is a reservation duplicate of CVE-2013-6858. Notes: All CVE users should reference CVE-2013-6858 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2013-6858

Multiple cross-site scripting XSS vulnerabilities in OpenStack Dashboard Horizon 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to 1 "Volumes" or 2 "Network Topology" page...

CVE-2013-6858

Multiple cross-site scripting XSS vulnerabilities in OpenStack Dashboard Horizon 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to 1 "Volumes" or 2 "Network Topology" page...

CVE-2008-6858

CVE-2008-6858 affects Absolute Banner Manager .NET 4.0. The weakness allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a specific value. The official description consistently states this is an authentication bypass leading to admin-level access...

CVE-2008-6858

creationtimestamp| type| source ---|---|--- 2008-10-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6890...

CVE-2006-6858

Miredo versions 0.9.8 through 1.0.5 fail to properly authenticate a Teredo bubble during UDP hole punching when using HMAC-MD5-64, enabling remote attackers to impersonate an arbitrary Teredo client. The vulnerability is described in CVE-2006-6858 and is evidenced in multiple data sources (NVD, C...

CVE-2013-6406

CVE-2013-6406 entry is rejected/not used and does not represent an active vulnerability.