newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure

newsp.eu PHP Calendar Script 1.0 - User Credentials Disclosure Exploit Title: PHP calendar script Password Download File Date: 2016-07-18 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.newsp.eu/calendarscript.php?pt=st Version: All Version...

CVE-2013-3656

Cybozu Office 9.1.0 and earlier does not properly manage sessions, which allows remote attackers to bypass authentication by leveraging knowledge of a login URL...

PHPCityPortal SQL Injection

Script Name: PHPCityPortal Auth Bypass SQL Injection Vulnerability Author: CoBRa21 Mail: [email protected] Script Page: http://phpcityportal.com/ DOrk: intext:"Powered by PHPCityPortal.com" EXPLOIT Username: 'or' Password: 'or' http://localhost/path/login.php Demo:...

PHPCityPortal - Authentication Bypass

Script Name: PHPCityPortal Auth Bypass SQL Injection Vulnerability Author: CoBRa21 Mail: [email protected] Script Page: http://phpcityportal.com/ DOrk: intext:"Powered by PHPCityPortal.com" EXPLOIT Username: 'or' Password: 'or' http://localhost/path/login.php Demo:...

DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2

Identification : DOINGSOFT-2008-03-10-001 CVE-ID : pending Discovery date : 14/12/2007 Correcting Date : 03/04/2008 How to get the patch : http://support.businessobjects.com/downloads/criticalhotfixes/default.asp choose "FixPack 3.5" Publishing date : 14/04/2008 Product : Business Object Infoview...

Unfixed XSS vulnerability at www.freedback.com

Security researcher Dr.Optix, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting www.freedback.com, which at the time of submission ranked 46026 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is...

should be able to login only via https

you should be able to configure JIRA to login via HTTPS. this is almost possible in 2.4.1. You can specify an https URL in security-config.xml as the login.url parameter. this makes loing links from e.g. the issue view page work correctly. a slight problem here is that the session remiains in the...