800 matches found
Ebay Magento Bug Bounty #12 - CSRF MSG Vulnerability
Document Title: =============== Ebay Magento Bug Bounty 12 - CSRF MSG Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1526 View Video: https://www.youtube.com/watch?v=x7uaABfxxU0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1460 EIBBP-31602...
PT-2015-6077
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.6.5 Description The issue is related to the improper validation of state in the SSH MSG NEWKEYS and SSH MSG KEXDH REPLY packet handlers. This allows remote attackers to cause a denial of service, resulting in a NULL...
PT-2015-5844
Name of the Vulnerable Software and Affected Versions Websense TRITON AP-WEB versions prior to 8.0.0 Websense V-Series appliances version 7.7 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the ws-userip in the ws-encdata parameter to...
PT-2015-5441
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.5.0 Description The issue allows remote servers to cause a denial of service crash or have other unspecified impact via crafted length values in an SSH MSG KEXINIT packet. This is related to the kex agree methods...
PT-2015-4062
Name of the Vulnerable Software and Affected Versions dpkg versions prior to 1.17.22 Description The issue concerns multiple format string vulnerabilities in the parse error msg function. These vulnerabilities can be exploited by remote attackers to cause a denial of service, potentially leading ...
CVE-2011-5297
Multiple cross-site scripting XSS vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter to default.php or 2 the username parameter to chatform.php...
CVE-2011-5297: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in TTChat 1.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 the msg parameter to default.php or 2 the username parameter to chatform.php...
PT-2015-3493
Name of the Vulnerable Software and Affected Versions TTChat version 1.0.4 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities can be exploited via...
DayuCMS 1.525 /member/include/tag.class.php SQL注入漏洞
/member/include/member.class.phpfunction exists$field, $value return $this-db-fetchone"SELECT id FROM $this-table WHERE $this-table.$field='$value' LIMIT 0, 1"; 传入的$field和$value未经过过滤直接带入SQL语句中。 /member/include/msg.class.php function send$msgs global $userid,$username,$member;...
CVE-2014-5259
Cross-site scripting XSS vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2014-5259: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in cattranslate.php in the CatTranslate JQuery plugin in BlackCat CMS 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
PT-2014-6373
Name of the Vulnerable Software and Affected Versions BlackCat CMS versions 1.0.3 and earlier Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the msg parameter in the cattranslate.php file of the CatTranslate...
CVE-2014-4543
Multiple cross-site scripting XSS vulnerabilities in payper/payper.php in the Pay Per Media Player plugin 1.24 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 fcolor, 2 links, 3 stitle, 4 height, 5 width, 6 host, 7 bcolor, 8 msg, 9 id, or 10 size...
Cross site scripting
Cross-site scripting XSS vulnerability in oleggo-twitter/twitterloginform.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
PT-2014-5963
Name of the Vulnerable Software and Affected Versions Oleggo LiveStream plugin versions 0.2.6 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote attackers to inject arbitrary web script or HTML via the msg parameter in the twitter login...
PT-2014-6009
Name of the Vulnerable Software and Affected Versions SnapApp plugin versions 1.5 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the msg or act parameters in the...
CVE-2014-4596: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 msg or 2 act parameter...
CVE-2014-4540: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in oleggo-twitter/twitterloginform.php in the Oleggo LiveStream plugin 0.2.6 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
Rlpr 2.0 msg() Function Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/10578/info It is reported that rlpr is prone to multiple vulnerabilities. These vulnerabilities can allow a remote attacker to execute arbitrary code in order to gain unauthorized access. The application is affected by a...
Nullsoft Winamp <= 5.3 (Ultravox-Max-Msg) Heap Overflow DoS PoC
No description provided by source. / Nullsoft Winamp 5.31 Ultravox Ultravox-Max-Msg Heap Overflow Dos POC by cocoruderfrankruderathotmail.com,2006/10/30 use like winampunsv.exe ultravox-max-msgvalue,then the winampunsvsimple ultravox server will listen on tcp port 80,when winamp connect the serve...