74 matches found
Ultrabenosaurus ChatBoard Cross Site Scripting
Exploit Title: Ultrabenosaurus ChatBoard - Stored XSS Date: 2016-06-14 Exploit Author: HaHwul Exploit Author Blog: www.hahwul.com Vendor Homepage: http://ultrabenosaurus.ninja/ Software Link: https://github.com/Ultrabenosaurus/ChatBoard/archive/master.zip Tested on: Debian wheezy CVE : none...
PT-2014-3248
Name of the Vulnerable Software and Affected Versions LiveZilla versions prior to 5.1.2.1 Description The issue allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting XSS attack...
CVE-2013-7385: Undefined Security Weakness
LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an...
CVE-2013-7033: Undefined Security Weakness
LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent...
PT-2014-3409
Name of the Vulnerable Software and Affected Versions LiveZilla versions 5.1.2.1 and earlier Description The issue allows remote attackers to obtain sensitive information and gain privileges by accessing the loginName and loginPassword variables using an independent cross-site scripting XSS attac...
CVE-2013-7003
Multiple cross-site scripting XSS vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 full name field, 2 company field, or 3 filename to chat.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 full name field, 2 company field, or 3 filename to chat.php...
CVE-2013-7003: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 full name field, 2 company field, or 3 filename to chat.php...
PT-2014-3246
Name of the Vulnerable Software and Affected Versions LiveZilla versions prior to 5.1.2.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific fields, including the full...
CVE-2013-5952: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Freichat comfreichat component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 xhash parameter to client/chat.php or 3 toname parameter to client/plugins/upload/upload.p...
PT-2014-3004
Name of the Vulnerable Software and Affected Versions Joomla! Freichat com freichat component versions prior to 9.4 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to certain PHP files. This can be achieved by manipulating the id or xha...
Joomla Freichat Cross Site Scripting
Hello, Multiple cross-site scripting XSS vulnerabilities in Freichat component for Joomla! allow remote attackers to inject arbitrary web script or HTML code via 1 the id or xhash parameters to /client/chat.php or 2 the toname parameter to /client/plugins/upload/upload.php. File: /client/chat.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...
CVE-2012-5330
Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...
CVE-2012-5330
Multiple cross-site scripting XSS vulnerabilities in asaanCart 0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO to calc.php, 2 chat.php, 3 register.php, or 4 index.php in libs/smartyajax/; or the 5 page parameter to libs/smartyajax/index.php...
CVE-2012-5330
As provided, CVE-2012-5330 is an XSS vulnerability in asaanCart 0.9 affecting multiple entry points: the PATH_INFO parameters to calc.php, chat.php, register.php, or index.php in libs/smarty_ajax/, and the page parameter to libs/smarty_ajax/index.php. The description does not specify affected ver...
CVE-2008-7097: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands via 1 the $id variable in admin/includes/delecpac.php, 2 $ordorderid variable in payments/paymentreceived.php, 3 $id variable in includes/functions.php, and 4 unspecified...
Unfixed XSS vulnerability at www.funny-stadium.com
Security researcher GeNkStAr, has submitted on 10/07/2008 a cross-site-scripting XSS vulnerability affecting www.funny-stadium.com, which at the time of submission ranked 493751 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/07/2008. It is...
Sql injection
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php...
CVE-2008-3764
Eval injection vulnerability in globalsoff.php in Turnkey PHP Live Helper 2.0.1 and earlier allows remote attackers to execute arbitrary PHP code via the test parameter, and probably arbitrary parameters, to chat.php...