845 matches found
SharePoint 2007/2010 and DotNetNuke < 6 - File Disclosure (via XEE)
Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke Date: September 15, 2011 Author: Nicolas Gregoire Version: SharePoint 2007 / 2010, DotNetNuke poc filename: xee.xsl...
XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke
Hello, Microsoft recently published MS11-074. This bulletin concerns mainly SharePoint 2007 and 2010 but CVE-2011-1892 applies too to Office Groove client and server, Office Forms Server 2007 and Office Web Apps 2010. The vulnerability is a "XML External Entity Reference" one, as described in...
File disclosure via XEE in SharePoint 2007/2010 and DotNetNuke < 6
Exploit for windows platform in category web applications Exploit Title: File disclosure via XEE in SharePoint and DotNetNuke Date: September 15, 2011 Author: Nicolas Gregoire Version: SharePoint 2007 / 2010, DotNetNuke poc filename: xee.xsl 0day.today 2018-01-05...
DotNetNuke < 5.0 Multiple Vulnerabilities
DotNetNuke is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dotnetnuke:dotnetnuke";...
DotNetNuke multiple 0day defect and repair-vulnerability warning-the black bar safety net
Affected versions: DotNetNuke 5. x Other versions may be also the existence of the problem + Application: DotNetNuke + Affected Version: version prior to 5. x + Vendor's URL: http://www.dotnetnuke.com/ + Bug Type: Privilege escalation, Unauthorized access, Remote + Risk Level: High + No-exploit i...
DotNetNuke Multiple 0day Vulnerabilities
Exploit for php platform in category web applications ========================================== DotNetNuke Multiple 0day Vulnerabilities ========================================== The largest Exploit Database in the world ! Greetz to Inj3ct0r Cr3w 1337day.com Greetz to R0073r "Sid3^effects - Wer...
DotNetNuke 5.05.01 - 5.06.00 'InstallWizard.aspx' XSS Vulnerability
DotNetNuke is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
DotNetNuke Remote Code Execution vulnerability
======================================= Vulnerability discovered: November 23, 2010 Discovered by: Danil Niggebrugge, Fox-IT BV https://www.fox-it.com/ Reported to vendor: November 30, 2010 Fix available: Yes ======================================= PRODUCT ------------- DotNetNuke is an open sour...
CVE-2010-4514
Cross-site scripting XSS vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4514
Cross-site scripting XSS vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4514
CVE-2010-4514 is an XSS vulnerability in DotNetNuke 5.05.01 and 5.06.00, affecting Install/InstallWizard.aspx. The underlying issue is improper handling of the __VIEWSTATE parameter, allowing remote attackers to inject arbitrary web script or HTML. Limited by the provided docs, exploitation statu...
CVE-2010-4514
Cross-site scripting XSS vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-4514: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter. NOTE: some of these details are obtained from third party information...
PT-2010-5517
Name of the Vulnerable Software and Affected Versions DotNetNuke versions 5.05.01 through 5.06.00 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the VIEWSTATE parameter in the Install/InstallWizard.aspx page. Recommendations For...
DotNetNuke CMS Cross Site Scripting
PR10-19 DotNetNuke CMS XSS Advisory publicly released: Friday, 3 December 2010 Vulnerability found: Saturday, 30 October 2010 Vendor informed: Monday, 1 November 2010 Severity level: Low/Medium Credits Richard Brain of ProCheckUp Ltd www.procheckup.com Description DotNetNuke is a Content Manageme...
DotNetNuke 5.5.1 - 'InstallWizard.aspx' Cross-Site Scripting
source: https://www.securityfocus.com/bid/45180/info DotNetNuke is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
DotNetNuke 5.5.1 - InstallWizard.aspx Cross-Site Scripting
DotNetNuke 5.5.1 - InstallWizard.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/45180/info DotNetNuke is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...
DotNetNuke 5 Event Calendar/Registration Sql Injection Vulnerability
Exploit for php platform in category web applications ==================================================================== DotNetNuke 5 Event Calendar/Registration Sql Injection Vulnerability ==================================================================== Author: Pokeng Software Link:...
DotNetNuke Shell Upload
DotNetNuke Remote File upload Vulnerability Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork : inurl:tabid/176/Default.aspx or inurl:portals/0/ Discovred by: Ra3cH & Ma3sTr0-Dz From : Algeria Contact : [email protected] Greetz to : ALLAH All Members of...