Booking Calendar Lite CSRF (change password)

Exploit for php platform in category web applications Exploit Title: Booking Calendar Lite CSRF change password Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/booking-calendar-lite/27644/ Category:: webapps Demo : http://dev.kreci.net/calendar/admin.php Greetz:...

BlaB! Lite 3 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: BlaB! Lite 3 CSRF Author: Jonturk75 Vendor or Software Link: http://gscripts.net/free-php-scripts/ChatScripts/BlaB!Lite3/details.html Category:: webapps Demo : http://justblab.com/b5/admin.php? Greetz: Inj3ct0r Exploit DataBase...

Sielco Sistemi Winlog PRO Buffer overflow Vulnerability

Sielco Sistemi Winlog PRO is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4037

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file...

Buffer overflow

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file...

CVE-2011-4037

CVE-2011-4037 affects Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09. The root cause is a buffer overflow caused by invalid data in certain fields of a project file (unspecified fields), as described across multiple sources. The vulnerability could allow code execution, w...

CVE-2011-4037

Buffer overflow in Sielco Sistemi Winlog PRO before 2.07.09 and Winlog Lite before 2.07.09 allows user-assisted remote attackers to execute arbitrary code via invalid data in unspecified fields of a project file...

The blue side interconnection(section hearing on CMS Lite) take the shell vulnerability-vulnerability warning-the black bar safety net

Blue connected the establishment of the station program is based on the section news CMS V7. 0 of the custom program, the official price of 160RMB Although it is based on the section news CMS V7. 0 but not with tech-ex 7. 0 background to get the shell method, the management account password can b...

CVE-2011-3987

dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to cause a denial of service system crash via an invalid DeviceIoControl request to \.\dtsoftbusctl...

CVE-2011-3987

The CVE-2011-3987 issue affects DAEMON Tools family (Lite prior to 4.41.3; Pro Standard/Advanced prior to 4.41.0315). A local DoS can be triggered by an invalid DeviceIoControl call to \.\dtsoftbusctl, crashing the system. Root cause: improper handling of IOCTL requests in dtsoftbus01.sys; expose...

WordPress Multiple Themes 's' Parameter XSS Vulnerabilities (Oct 2011) - Active Check

At least one theme of WordPress is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-3855

Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3855

Cross-site scripting XSS vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2011-3855

CVE-2011-3855 affects the WordPress F8 Lite theme prior to version 4.2.2. The vulnerability is a cross-site scripting (XSS) flaw exposed through the theme’s s parameter, allowing an attacker to inject arbitrary script/HTML. Root cause, as stated in multiple connected entries, is improper handling...

PT-2011-4731 · Unknown · F8 Lite Theme

Name of the Vulnerable Software and Affected Versions: F8 Lite theme versions prior to 4.2.2 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter. Recommendations: For versions prior to 4.2.2, update to version 4.2.2 or later...

F8 Lite < 4.2.2 - XSS

The F8 Lite WordPress theme was affected by a XSS security vulnerability...

WordPress F8 Lite Theme 4.2.1 - Cross Site Scripting

WordPress F8 Lite theme's "s" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

WordPress Theme F8 Lite 4.2.1 - s Cross-Site Scripting

WordPress Theme F8 Lite 4.2.1 - s Cross-Site Scripting source: https://www.securityfocus.com/bid/49867/info The F8 Lite theme for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WordPress Theme F8 Lite 4.2.1 - 's' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49867/info The F8 Lite theme for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...