Maarch LetterBox 2.8 - (Authentication Bypass) Insecure Cookies

Title : Maarch LetterBox 2.8 Insecure Cookie Handling Vulnerability Login Bypass Author : ZoRLu / [email protected] / [email protected] Home : http://milw00rm.com / its online Date : 17.11.2014 Demo : http://www.era.sn/courrier Download :...

CVE-2014-4719

Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...

Cross site scripting

Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2014-4719

User-Friendly SVN (USVN) is affected by an XSS in the login panel (svn/login/) prior to version 1.0.7, allowing an attacker to inject arbitrary script via the username field. The vulnerability is documented in CVE-2014-4719 with a base CVSS2 score of 4.3 (I=P). Affected component is the login han...

User Friendly SVN Cross Site Scripting

Exploit Title : User friendly svnweb based interface reflected xss vulnerability Author : Manish Kishan Tanwar Vendor : http://www.usvn.info/ version affected: below 1.0.7 Date : 21/06/2014 Discovered @ : INDISHELL Lab Love to : zero cool,Team indishell,Hardeep Singh,jagriti email :...

Mavenlink: Login password guessing attack

I have found out that an attacker can perform brute force attack on your login panel because there is no rate limitation to prevent this attack...

joola.io: Login password guessing attack

Your joola main login panel does not have rate limiting enabled to prevent brute force attacks on its panel...

Mail.ru: Clicjacking on Login panel

i am able to run on frame which lead to click jacking, Find Details on screen shot...

Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Web File Browser 0.4bX UploadFile/DownloadFile Vulenrabilities + Date: 14-12-2013 + Category: WebApp + Vendor: http://sourceforge.net/projects/webfilebrowser/files/webfilebrowser/ + Google Dork:...

ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit ===================================================== / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements:...

Dora Emlak Script v1.0 (tr) Admin Login ByPass

Dora Emlak Script v1.0 tr Admin Login ByPass ilker kandemir ilkerkandemiratmynet.com Download: http://aspindir.com/goster/5027 TnX.: Ajann, Dumenci, H0tTurk, Str0ke Bug in ../dora/administartor/yonetim/patron/default.asp cookFirstLevel = Session"FirstLevelSecurity" 'Ilk Gьvenlik Session...

DEBIAN-CVE-2005-3787

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.6.4-pl4 allow remote attackers to inject arbitrary web script or HTML via 1 the cookie-based login panel, 2 the title parameter and 3 the table creation dialog...