9527 matches found
PHPCMS 2007 / 2008 跨站脚本漏洞(xss vulnerability)
1、在phpcms2007中，sendmail.php未对传入的mailto, title等参数过滤，导致xss的产生。 不用上源码了，明眼人一看就明白。 Demo：http://www.cnegg.net/mail/sendmail.php?mailto=asdfa"scriptalert/CnCxzSec//script 考虑到PHPCMS2007的用户交互性，该鸡肋XSS可盗取COOKIES，有一定危害。 2、在phpcms2008中sendmail.php对传入变量有一定过滤，可是在magicquote=off的情况下，仍可利用...
PR09-15: XSS injection vulnerability within HP System Management Homepage (Insight Manager)
PR09-15: XSS injection vulnerability within HP System Management Homepage Insight Manager Vulnerability found: 11th October 2009 Severity: Medium Description: A XSS vulnerability has been found within HP System Management; Arising from insufficient input filtering. By using a specially-crafted...
Design/Logic Flaw
The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and...
CVE-2008-7253
The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and...
CVE-2008-7253
The CVE-2008-7253 entry describes a vulnerability in IBM Lotus Domino Server where the default web server configuration enables the HTTP TRACE method (potentially in Domino Server versions 6.0–8.0). This enables an XST-style exposure that could allow remote attackers to steal cookies and authenti...
CVE-2010-0386
CVE-2010-0386 affects Sun Java System Application Server 7 and 7 2004Q2. The default config enables HTTP TRACE, enabling remote attackers to steal cookies and authentication credentials via cross-site tracing (XST); related to CVE-2004-2763 and CVE-2005-3398. The connected documents provide the v...
CVE-2008-7253
The default configuration of the web server in IBM Lotus Domino Server, possibly 6.0 through 8.0, enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing XST attack, a related issue to CVE-2004-2763 and...
SAP NetWeaver XI SOAP Adapter — XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver XI SOAP Adapter 3.0-7.11 Vendor URL: Bugs: XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of Public Advisory: 09.03.2011 CVE-number: Author: Dmitriy Evdokimov Description SAP Netweaver 70 application XI SOAP...
Web Server Generic Cookie Injection
The remote host is running a web server that fails to adequately sanitize request strings of malicious JavaScript. By leveraging this issue, an attacker may be able to inject arbitrary cookies. Depending on the structure of the web application, it may be possible to launch a 'session fixation'...
SAP NetWeaver ISpeak — XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver J2EE Engine Ispeak Application Vendor URL: http://www.sap.com Bugs:XSS Exploits: YES Reported: 25.01.2010 Vendor response: 26.01.2010 Date of Public Advisory: 0.07.2011 CVSS: 4.3 Author:Dmitriy Evdokimov Description SAP NetWeaver Ispeak...
SAP NetWaver JPR Proxy Server — Multiple XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver JPR Proxy Vendor URL: Bugs: XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Dmitriy Evdokimov Description SAP NetWeaver...
SAP NetWeaver MessagingServer — XSS
Application: SAP NetWeaver Versions Affected: SAP NetWeaver Messaging system from 7.10-7.30 Vendor URL: http://www.sap.com Bugs: Linked XSS and Stored XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of Public Advisory: 12.04.2011 Author: Alexandr Polyakov Description...
OK3W article management system v4. 7 vulnerability-vulnerability warning-the black bar safety net
by 3x OK3W is a set of articles management system, the entire system of the program structure is based on a custom class to achieve, very creative o∩∩o... Security is still relatively good, the current free version 4. 7 The existence of this vulnerability, the official website may also exist, but...
Permanent Cross-Site Scripting (XSS) in FreePBX 2.5.x – 2.6.0
Exploit for unknown platform in category web applications ============================================================= Permanent Cross-Site Scripting XSS in FreePBX 2.5.x – 2.6.0 ============================================================= Advisory Name: Permanent Cross-Site Scripting XSS in...
PPVChat - Multiple Vulnerabilities
PPVChat - Multiple Vulnerabilities andresg888 Exploit Title : Exotic-Cams --LFI & XSS-- Date : 2010-01-09 Author : andresg888 Vendor : http://www.ppvchat.com/ Contact : andresg8884tgmaildotcom Dork : No DoRk f0R ScRipT KiDDieS Example LFI: http://server/registration/model.php Example XSS: Go to...
PPVChat - Multiple Vulnerabilities
andresg888 Exploit Title : Exotic-Cams --LFI & XSS-- Date : 2010-01-09 Author : andresg888 Vendor : http://www.ppvchat.com/ Contact : andresg8884tgmaildotcom Dork : No DoRk f0R ScRipT KiDDieS Example LFI: http://server/registration/model.php Example XSS: Go to registration/user.php and in "City"...
CentOS 4 / 5 : openssh (CESA-2008:0855)
Updated openssh packages are now available for Red Hat Enterprise Linux 4, Red Hat Enterprise Linux 5, and Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHe...
Authentication flaw
globepersonnellogin.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 pbusername aka pb%5Fusername and 2 level cookies...