240 matches found
Stored Cross-Site Scripting Vulnerability in Click Story App
Clicker Stories is an audiobook app for children. A stored cross-site scripting vulnerability exists in the Clicker Stories app. Allows an attacker to insert malicious scripts into input points where the vulnerability exists, to steal users' cookies or to realize phishing attacks...
Knight Talent System V3.7 Exists Storage-based Cross-site Scripting Vulnerability
Knight Talent System is a professional talent system based on PHP + MYSQL as the core development, free + open source. The system has a high implementation efficiency, free switching of templates, flexible background management functions and many other excellent features. Knight Talent System V3....
eFront Learning CMS Cross-Site Scripting Vulnerability
eFront is an online learning system. A cross-site scripting vulnerability exists in eFront. A remote attacker can exploit the vulnerability to inject malicious script code into the affected application...
MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability
Document Title: =============== MyScript Memo v3.0 iOS - Mail Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1706 Release Date: ============= 2016-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 170...
Angler Exploit Kit Spreading Cryptowall 4.0
As expected, it didn’t take long for one of the most popular exploit kits, Angler, to start spreading the latest iteration of Cryptowall ransomware. A drive-by campaign that uses a one-two punch to drop Cryptowall 4.0 has been observed in the wild this week, according to researchers at Heimdal...
Splunk Cross-Site Scripting Vulnerability (CNVD-2015-06361)
Splunk is a suite of data collection and analysis software. The software is primarily used to collect, index and analyze machine-generated data, including data generated by all IT systems and infrastructure. Splunk suffers from a cross-site scripting vulnerability that allows remote attackers to...
адвокат-в-томске.рф XSS vulnerability
Vulnerable URL:...
Adobe ColdFusion suffers from an unspecified cross-site scripting vulnerability (CNVD-2015-02633)
Adobe ColdFusion is a dynamic Web server , its CFML is a programming language , similar to the current JSP in the JSTL. Adobe ColdFusion has an unspecified cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which c...
IBM Sterling Connect:Enterprise跨站脚本漏洞
CVE ID:CVE-2013-6327 IBM Sterling Connect是一款点到点文件传输软件，可实现企业内和企业间的大容量、安全可靠的文件交付。 IBM Sterling Connect:Enterprise存在一个未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 IBM Sterling Connect:Enterprise 1.3.0.2 IBM Sterling Connect:Enterprise 1.4.0.0. 厂商补丁： IBM ----- IBM Sterling Connect...
webring Cross Site Scripting Vulnerability
Exploit for unknown platform in category web applications ========================================== webring Cross Site Scripting Vulnerability ========================================== ======================================================================================== | Title : webring Cro...
appservopen-xss.txt
========================================================== AppServ Open Project XSS =Example= Alert: - http://target/index.php?appservlang=" - http://target/index.php?appservlang=" Open Window - http://target/index.php?appservlang="window.open/phpinfo.php/ - http://target/index.php?appservlang="...
Unfixed XSS vulnerability at search.dunyagazetesi.com.tr
Security researcher St@rExT, has submitted on 19/08/2007 a cross-site-scripting XSS vulnerability affecting search.dunyagazetesi.com.tr, which at the time of submission ranked 47501 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It...
Cisco Unified MeetingPlace Web Conference跨站脚本漏洞
Cisco Unified MeetingPlace Web Conference是一款Web会议解决方案。 Cisco Unified MeetingPlace Web Conference不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是对多个参数缺少充分过滤，可导致恶意脚本注入。构建恶意WEB页，诱使用户访问，可导致获得敏感信息。目前没有详细漏洞细节提供。 Cisco Unified MeetingPlace Web Conference 5.3.104.3 Cisco Unified MeetingPlace Web Conference...
simpcmslight-rfi.txt
Bug Found By Dr.RoVeR --Arab48 Hacker Contact: [email protected] --- Script: SimpCMS Light Download: http://www.simpcms.com/light/normal/simp-cms-light.zip -- Bug File: index.php Bug code in line 31: include $site.".php"; -- Exploit: http://site.com/path/index.php?site=EvilScript --...
Unfixed XSS vulnerability at www.nalp.org
Security researcher MaXWeL, has submitted on 04/07/2007 a cross-site-scripting XSS vulnerability affecting www.nalp.org, which at the time of submission ranked 1008261 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2007. It is currently...
[Full-disclosure] Apple Mac Tiger 10.4 weblog server
------------------------------------------------------------ - EXPL-A-2005-010 exploitlabs.com Advisory 039 - ------------------------------------------------------------ - Mac OSX Server weblog - AFFECTED PRODUCTS ================= Mac OSX 10.4.0 Weblog Server http://apple.com OVERVIEW ========...
STG Security Advisory 2004-11-22.11
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-11 JSPWiki XSS vulnerability Revision 1.0 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== JSPWiki is one of famous wiki web applications. It has...
Microsoft Internet Explorer - Remote Application.Shell
function InjectedDuringRedirection showModalDialog'md.htm',window,"dialogTop:-10000;dialogLeft:-10000;dialogHeight:1; dialogWidth:1;".location="vbscript:"""; setTimeout"myiframe.execScriptInjectedDuringRedirection.toString",100; setTimeout"myiframe.execScript'InjectedDuringRedirection' ",101;...
Secunia Research: Opera browser Cross Site Scripting
====================================================================== Secunia Research 26/02/2003 - Opera browser Cross Site Scripting - ====================================================================== Table of Contents 1..........................................................Description...