Cross site scripting

Cross-site scripting XSS vulnerability in the filedownload function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter...

CVE-2012-4873

GNUBoard is vulnerable to an XSS in the file_download function via the filename parameter, affecting versions before 4.34.21. The root cause is improper handling of the filename input leading to script/HTML injection. Remediation: upgrade to GNUBoard 4.34.21 or apply the provided patch. Public re...

Web File Browser 0.4b14 - File Download

Web File Browser 0.4b14 - File Download Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link: http://downloads.sourceforge.net/project/webfilebrowser/webfilebrowser/0.4b14/webfilebrowser-0.4b14.zip...

Web File Browser 0.4b14 File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link:...

易分销任意文件打包下载漏洞 管理员请删掉上一份 此份为准！

简要描述： 可以打包下载任意文件。。 详细说明： 通过注册注册地址：http://shop.fenxiaowang.com/index.php 进入试用后台 通过模板打包功能 修改提交参数 可以打包任何路径下的文件 方式如下 http://shop-xxxxxxx.shopex.fenxiaowang.com/shopadmin/index.php?ctl=system/template&act=dlpkg&p0=../../ 此漏洞同样存在 易开店系统。。 说一句无关的话：收到短信提醒 说shopex 给我发礼物，请我注意查收？礼物是什么 ？在哪里收？？？？！！！ 漏洞证明：...

BOSSI company(enterprises)website administrative system injection&upload exploit-vulnerability warning-the black bar safety net

BOSSI companyenterpriseswebsite administrative system,Chinese / English bilingual version,the background in same page within while management added modified information within OF in the English content,the website's left column using the module, you can freely increase&delete,can not modify the...

dedecms content administrator daemon download vulnerability and fix-vulnerability warning-the black bar safety net

dedecms in prohibited to upload any file including images when the first script Trojan into a jpg and then transmitted to another station and then use the articles to publish directly to fill in on the picture of the address submitted will automatically put the picturedownloadinto the server and...

JCMS 2010 - File Download

Title: JCMS 2010 File Download Vulnerability Date: 2010-11-22 Author: Beach Team: http://www.linux520.com/ Vendor: http://www.hanweb.com/ Language:Java Greetz: Brother Description: In /module/download/downfile.jsp ,filename and pathfile didn't verify user's input So this vulnerability allows an...

sFileManager 24a Local File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= sFileManager eNYe-Sec - www.enye-sec.org - www.pepelux.org ----- by the author ----- Simple File Manager SFM is a web based file management utility. It is designed to be used by those that don't want to use ftp or SHOULD NOT use ftp. It c...

phpcms2008sp4 IIS download an arbitrary file vulnerability-vulnerability warning-the black bar safety net

| Affected systems: phpcms2008sp4UTF8100510 Test method: Registered members Released a download of the articles is not required by the approval Then preview, and then point download. --- ! Size: 2.07 K Size: 3 0 7 x 1 0 5 Viewed: 1 times Click to open a new window to browse the full map! Size:...

XT-Commerce v1 Beta 1 permission to bypass the Modify download backup vulnerability-vulnerability warning-the black bar safety net

Premiere: the Red section of the network security Author: Amxking Submitted to: indoushka Vulnerability program: XT-Commerce v1 Beta 1 Affected version: v1 Beta 1 Risk level: medium Vulnerability description: Amxking:the vulnerability is I and the foreign Avengers team communication time obtained...

My School Script Data Base Download Vulnerability

Exploit for asp platform in category web applications ================================================= My School Script Data Base Download Vulnerability ================================================= ======================================================================================== |...

Mp3 MuZik - Database Disclosure

======================================================================================== | Title : Mp3 MuZik Data Base Download Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Bug : DB ====================== Exploit By indoushka ================================= Exploit : 1 -...

My School Script Database Disclosure

======================================================================================== | Title : My School Script Data Base Download Vulnerability | Author : indoushka | Home : www.iqs3cur1ty.com | Web Site : http://dl.p30vel.ir/scripts/My.School.Script.pub.bY.Eh3an.p30vel.ir.zip | Bug : DB...

OSSIM download.php Directory Traversal

The version of OSSIM hosted on the remote host has a directory traversal vulnerability. Input to the 'file' parameter of the 'ossim/repository/download.php' script is not properly sanitized. A remote attacker could exploit this to download arbitrary files, subject to the privileges under which th...

VP-ASP Shopping Cart 7.0 DB Download Vulnerability

Exploit for asp platform in category web applications ================================================== VP-ASP Shopping Cart 7.0 DB Download Vulnerability ================================================== ======================================================================================== |...

Lebi soft Ziyaretci Defteri_v7.5 DB Download Vulnerability

Exploit for unknown platform in category web applications ========================================================== Lebi soft Ziyaretci Defteriv7.5 DB Download Vulnerability ==========================================================...

Futility Forum 1.0 Revamp Database Disclosure

======================================================================================== | Title : Futility Forum 1.0 Revamp DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

AspBB - Active Server Page Bulletin Board DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : AspBB - Active Server Page Bulletin Board DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum ...

BaalASP 2.0 DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : BaalASP 2.0 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...