43 matches found
BoltWire 跨站脚本漏洞
BoltWire is a free, versatile wiki-like site engine developed in PHP with repository-like information management capabilities. A cross-site scripting vulnerability exists in BoltWire that allows an attacker to execute arbitrary web script or HTML via a specially crafted payload in the name and la...
CVE-2022-24227
BoltWire exposes a documented XSS vulnerability (CVE-2022-24227) affecting v7.10 and v8.00 where an attacker can inject arbitrary scripts/HTML via crafted input in the name and lastname fields. The Red Hat/PRION/CNNVD entries corroborate the same issue. Remediation guidance from PT-2022-16547 rec...
BoltWire 6.03 Local File Inclusion
Exploit Title: BoltWire 6.03 - Local File Inclusion Date: 2020-05-02 Exploit Author: Andrey Stoykov Vendor Homepage: https://www.boltwire.com/ Software Link: https://www.boltwire.com/downloads/go&v=6&r=03 Version: 6.03 Tested on: Ubuntu 20.04 LAMP LFI: Steps to Reproduce: 1 Using HTTP GET request...
BoltWire 6.03 - Local File Inclusion
Exploit Title: BoltWire 6.03 - Local File Inclusion Date: 2020-05-02 Exploit Author: Andrey Stoykov Vendor Homepage: https://www.boltwire.com/ Software Link: https://www.boltwire.com/downloads/go&v=6&r=03 Version: 6.03 Tested on: Ubuntu 20.04 LAMP LFI: Steps to Reproduce: 1 Using HTTP GET request...
BoltWire 6.03 - Local File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: BoltWire 6.03 - Local File Inclusion Exploit Author: Andrey Stoykov Vendor Homepage: https://www.boltwire.com/ Software Link: https://www.boltwire.com/downloads/go&v=6&r=03 Version: 6.03 Tested on: Ubuntu 20.04 LAMP LFI: Steps t...
CVE-2013-0737
Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...
CVE-2013-0737
The CVE-2013-0737 entry describes an XSS vulnerability in BoltWire 3.5 and earlier. Affected software: BoltWire versions up to 3.5. The vulnerability is triggered via the fieldnames parameter, enabling remote attackers to inject arbitrary web script or HTML. The documented impact is cross-site sc...
CVE-2013-0737
Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...
BoltWire 4.10 Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Vulnerability in BoltWire, which can be exploited to execute arbitrary PHP code on the target system and gain complete control over vulnerable web application. 1 Unrestricted Upload of File with Dangerous Type in BoltWire: CVE-2014-4169 The...
CVE-2014-4169: BoltWire index.php file upload
BoltWire (vulnerable through /index.php) suffers from improper validation of uploaded filenames, allowing an attacker with valid credentials to upload a PHP file and rename it (e.g., file.php) to achieve remote code execution and complete compromise of the web application. Descriptions from 1337D...
Unrestricted Upload of File with Dangerous Type in BoltWire
High-Tech Bridge Security Research Lab discovered vulnerability in BoltWire, which can be exploited to execute arbitrary PHP code on the target system and gain complete control over vulnerable web application. 1 Unrestricted Upload of File with Dangerous Type in BoltWire: CVE-2014-4169 The...
BoltWire <= 3.5 Multiple XSS Vulnerabilities
BoltWire is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2013-2651
Multiple cross-site scripting XSS vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 "p" or 2 content parameter to index.php...
CVE-2013-2651
BoltWire
CVE-2013-2651
Multiple cross-site scripting XSS vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 "p" or 2 content parameter to index.php...
[ISecAuditors Security Advisories] Multiple Reflected XSS vulnerabilities in BoltWire <= v3.5
============================================= INTERNET SECURITY AUDITORS ALERT 2013-010 - Original release date: March 20th, 2013 - Last revised: March 25th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score - CVE-ID: CVE-2013-2651...
BoltWire 3.5 Cross Site Scripting Vulnerability
BoltWire versions 3.5 and beloBoltWire versions 3.5 and below suffer from multiple cross site scripting vulnerabilities.w suffer from multiple cross site scripting vulnerabilities. ============================================= INTERNET SECURITY AUDITORS ALERT 2013-010 - Original release date: Mar...
BoltWire 3.5 Cross Site Scripting
============================================= INTERNET SECURITY AUDITORS ALERT 2013-010 - Original release date: March 20th, 2013 - Last revised: March 25th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score - CVE-ID: CVE-2013-2651...
BoltWire 3.4.16 Multiple XSS vulnerabilities
Advisory: BoltWire 3.4.16 Multiple XSS vulnerabilities Advisory ID: SSCHADV2012-001 Author: Stefan Schurtz Affected Software: Successfully tested on BoltWire 3.4.16 Vendor URL: http://www.boltwire.com/ Vendor Status: informed ========================== Vulnerability Description...