1050 matches found
Unfixed XSS vulnerability at crm.rightnow.com
Security researcher 0x6834636b, has submitted on 09/10/2010 a cross-site-scripting XSS vulnerability affecting crm.rightnow.com, which at the time of submission ranked 34290 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...
Cross site scripting
Cross-site scripting XSS vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the formurl parameter...
CVE-2010-1453
Cross-site scripting XSS vulnerability in the Login form in Piwik 0.1.6 through 0.5.5 allows remote attackers to inject arbitrary web script or HTML via the formurl parameter...
CVE-2009-4302
The CVE-2009-4302 issue affects Moodle: login/index_form.html in Moodle 1.8 (before 1.8.11) and 1.9 (before 1.9.7) links to an HTTP page even when served over HTTPS, which can cause credentials to be transmitted in cleartext. This is a remote vulnerability allowing credential sniffing. Supported ...
Update Protection against HP Power Manager Remote Code Execution
A remote code execution vulnerability exists within HP Power Manager, a web-based application for managing a HP Uninterruptible Power System UPS. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based...
QuickCart 3.x xss xsrf Local File Inclusion Directory Traversal
No description provided by source. DISCOVERED: PaweÅ‚ 'kl3ryk' Åaskarzewski GREETZ: hawk, pin3ska, black ant, qwert666, ua and gacmaan DIRECTORY TRAVERSAL http://victim.com/?p=ONE OF THE EXISITING FILES-EXISITING ACTION IN THIS FILE- Most of actions load templates form bad directory and then thr...
QuickCart 3.x xss, xsrf, Local File Inclusion, Directory Traversal
Exploit for unknown platform in category web applications ================================================================== QuickCart 3.x xss, xsrf, Local File Inclusion, Directory Traversal ================================================================== DIRECTORY TRAVERSAL...
Lunascape Address Bar Spoofing Vulnerability
Lunascape Browser is prone to Address Bar Spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Avant Browser Address Bar Spoofing Vulnerability
This host is installed with Avant Browser and is prone to Address Bar Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbavantbrowseraddrbarspoofingvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ Avant Browser Address Bar Spoofing Vulnerability Authors: Sharath S Copyright: Copyright c 2009...
Avant Browser Address Bar Spoofing Vulnerability
Avant Browser is prone to Address Bar Spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Design/Logic Flaw
Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the sit...
Design/Logic Flaw
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site...
CVE-2009-3004
Avant Browser 11.7 Builds 35 and 36 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the sit...
CVE-2009-3006
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site...
CVE-2009-3003
Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the...
CVE-2009-3006
The CVE-2009-3006 entry concerns Maxthon Browser 2.5.3.80 UNICODE. The vulnerability allows a remote attacker to spoof the address bar by using window.open with a relative URI, causing the browser to display an arbitrary URL on the site visited by the victim and potentially trigger a spoofed logi...
Video chat rooms password cracking techniques-vulnerability warning-the black bar safety net
Reprint when you didn't see the picture, we only will look at. Because the working relationship, and I qq every Monday to Friday online, but very few people add me as a friend, is probably the old bar, after all, are 2 4, online Dating that period of burning passion had left me far away. But that...
CVE-2008-6772
The CVE affects YourPlace 1.0.2 and earlier where login/register_form.php does not verify that a username already exists during account creation, allowing a remote attacker to bypass access restrictions by registering a new account with a target user’s username. Documented impact is a Partial con...
CVE-2009-0662
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors...
PYSEC-2009-17
The PlonePAS product 3.x before 3.9 and 3.2.x before 3.2.2, a product for Plone, does not properly handle the login form, which allows remote authenticated users to acquire the identity of an arbitrary user via unspecified vectors...