51 matches found
CVE-2022-24227
A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...
CVE-2022-24227
A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...
CVE-2022-24227
BoltWire exposes a documented XSS vulnerability (CVE-2022-24227) affecting v7.10 and v8.00 where an attacker can inject arbitrary scripts/HTML via crafted input in the name and lastname fields. The Red Hat/PRION/CNNVD entries corroborate the same issue. Remediation guidance from PT-2022-16547 rec...
BoltWire 跨站脚本漏洞
BoltWire is a free, versatile wiki-like site engine developed in PHP with repository-like information management capabilities. A cross-site scripting vulnerability exists in BoltWire that allows an attacker to execute arbitrary web script or HTML via a specially crafted payload in the name and la...
PT-2022-16547 · Boltwire · Boltwire
Name of the Vulnerable Software and Affected Versions: BoltWire versions 7.10 through 8.00 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters. Recommendations: For BoltWire version 7.10,...
CVE-2022-24227: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in BoltWire v7.10 and v 8.00 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the name and lastname parameters...
BoltWire 6.03 - Local File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: BoltWire 6.03 - Local File Inclusion Exploit Author: Andrey Stoykov Vendor Homepage: https://www.boltwire.com/ Software Link: https://www.boltwire.com/downloads/go&v=6&r=03 Version: 6.03 Tested on: Ubuntu 20.04 LAMP LFI: Steps t...
BoltWire 6.03 Local File Inclusion
Exploit Title: BoltWire 6.03 - Local File Inclusion Date: 2020-05-02 Exploit Author: Andrey Stoykov Vendor Homepage: https://www.boltwire.com/ Software Link: https://www.boltwire.com/downloads/go&v=6&r=03 Version: 6.03 Tested on: Ubuntu 20.04 LAMP LFI: Steps to Reproduce: 1 Using HTTP GET request...
BoltWire 6.03 - Local File Inclusion
Exploit Title: BoltWire 6.03 - Local File Inclusion Date: 2020-05-02 Exploit Author: Andrey Stoykov Vendor Homepage: https://www.boltwire.com/ Software Link: https://www.boltwire.com/downloads/go&v=6&r=03 Version: 6.03 Tested on: Ubuntu 20.04 LAMP LFI: Steps to Reproduce: 1 Using HTTP GET request...
CVE-2013-0737
Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...
CVE-2013-0737
The CVE-2013-0737 entry describes an XSS vulnerability in BoltWire 3.5 and earlier. Affected software: BoltWire versions up to 3.5. The vulnerability is triggered via the fieldnames parameter, enabling remote attackers to inject arbitrary web script or HTML. The documented impact is cross-site sc...
CVE-2013-0737
Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...
CVE-2013-0737: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter...
PT-2020-7334
Name of the Vulnerable Software and Affected Versions: BoltWire versions 3.5 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter, which can lead to cross-site scripting XSS attacks. This enables attackers to execute...
BoltWire 4.10 Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Vulnerability in BoltWire, which can be exploited to execute arbitrary PHP code on the target system and gain complete control over vulnerable web application. 1 Unrestricted Upload of File with Dangerous Type in BoltWire: CVE-2014-4169 The...
CVE-2014-4169: BoltWire index.php file upload
BoltWire (vulnerable through /index.php) suffers from improper validation of uploaded filenames, allowing an attacker with valid credentials to upload a PHP file and rename it (e.g., file.php) to achieve remote code execution and complete compromise of the web application. Descriptions from 1337D...
Unrestricted Upload of File with Dangerous Type in BoltWire
High-Tech Bridge Security Research Lab discovered vulnerability in BoltWire, which can be exploited to execute arbitrary PHP code on the target system and gain complete control over vulnerable web application. 1 Unrestricted Upload of File with Dangerous Type in BoltWire: CVE-2014-4169 The...
BoltWire <= 3.5 Multiple XSS Vulnerabilities
BoltWire is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...