PT-2015-15: Information Disclosure in LiteSpeed Web Server

The specialists of the Positive Research center have detected an Information Disclosure vulnerability in LiteSpeed Web Server. This vulnerability allows attackers to obtain the content of arbitrary memory locations in LiteSpeed Web Server. The exploitation of the vulnerability makes it possible t...

Joomla Eventbooking Cross Site Scripting

Exploit Title : Joomla comeventbooking component XSS vulnerability Author : Jagriti Sahu AKA incredible Download Link : https://github.com/Jasonudoo/platform/tree/master/components/comeventbooking Date : 13/11/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mrudula and Harry Discovered At :...

SePortal 2.5 - SQL Injection

No description provided by source. Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability:...

Litespeed Technologies Web Server Remote Poison null byte Exploit

No description provided by source. Litespeed Technologies Web Server Remote Poison null byte Zero-Day discovered and exploited by Kingcope in June 2010 google gives me over 9million hits Example exploit session: %nc 192.168.2.19 80 HEAD / HTTP/1.0 HTTP/1.0 200 OK Date: Sun, 13 Jun 2010 00:10:38 G...

Litespeed Web Server 4.0.12 - (Add Admin) CSRF and XSS Vulnerabilities

No description provided by source. Author: d1dn0t didnotatmedotcom Software Link: http://www.litespeedtech.com/litespeed-web-server-downloads.html Version: 4.0.12 Greetz: Muts/Ryujin/KernelSaunders 0x00 Product Description LiteSpeed Web Server is the leading high-performance, high-scalability web...

FreeBSD LiteSpeed Web Server 4.0.17 with PHP - Remote Exploit

No description provided by source. LiteSpeed Web Server 4.0.17 w/ PHP Remote Exploit for FreeBSD bug discovered & exploited by Kingcope Dec 2010 Lame Xploit Tested with success on FreeBSD 8.0-RELEASE - LiteSpeed WebServer 4.0.17 Standard & Enterprise x86 FreeBSD 6.3-RELEASE - LiteSpeed WebServer...

LiteSpeed 2.1.5 ConfMgr.php Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15485/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

LiteSpeed Web Server <= 3.2.3 - Remote Source Code Disclosure Vuln

No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos...

CVE-2012-4871

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

CVE-2012-4871

CVE-2012-4871 affects LiteSpeed Web Server 4.1.11, with an XSS in the administrator panel via the gtitle parameter of service/graph_html.php. The vulnerability allows remote attackers to inject arbitrary web scripts/HTML. Documents do not provide exploitation details or a confirmed patch; remedia...

CVE-2012-4871

Cross-site scripting XSS vulnerability in service/graphhtml.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter...

PT-2012-5623 · Litespeed · Litespeed Web Server

Name of the Vulnerable Software and Affected Versions: LiteSpeed Web Server version 4.1.11 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the gtitle parameter in the administrator panel. Recommendations: For LiteSpeed Web...

LiteSpeed 4.1.11 Cross Site Scripting

Hey, so i decided to open this blog with with a post about a vulnerability I’ve found quite some time ago in LiteSpeed HTTP server Basically a simple reflected XSSCross Site Scripting in the administrator panel which is another instance of the HTTP server running on port 7080 If an attacker succe...

Litespeed Web Server - 'gtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55946/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context o...

Litespeed Web Server - gtitle Cross-Site Scripting

Litespeed Web Server - gtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/55946/info LiteSpeed Web Server is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

SePortal 2.5 SQL Injection

Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability: http://server/redirect.php?action=banner&goto= SQL How to fix this...

SePortal 2.5 - SQL Injection (1)

SePortal 2.5 - SQL Injection 1 Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability: http://server/redirect.php?action=banner&got...

SePortal 2.5 SQL Injection

Exploit for php platform in category web applications Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability:...

SePortal 2.5 - SQL Injection (1)

Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability: http://server/redirect.php?action=banner&goto= SQL How to fix this...