543 matches found
Zenoss Monitoring System 4.2.5-2108 (x64) - Persistent Cross-Site Scripting
Exploit Title: Stored XSS vulnerability in Zenoss core open source monitoring system Date: 12/05/2014 Exploit author: Dolev Farhi dolevatopenflare.org Vendor homepage: http://zenoss.com Software Link: http://www.zenoss.com Version: Core 4.2.5-2108 64bit Tested on: Kali Linux Vendor alerted:...
Omeka 2.2 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
Omeka 2.2 CSRF And Stored XSS Vulnera...
Zurmo CRM - 储存型XSS
No description provided by source. Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored URL:...
Zurmo CRM - Persistent Cross-Site Scripting
Zurmo CRM - Persistent Cross-Site Scripting Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored UR...
Zurmo CRM - Persistent Cross-Site Scripting
Affected software: Zurmo CRM Zurmo is an Open Source Customer Relationship Management CRM application that is mobile, social, and gamified. We use a test-driven methodology for building every part of the application. Type of vulnerability: XSS Stored URL: zurmo.com Discovered by: Provensec Websit...
Wordpress Quick Contact Form Plugin 6.0 - Persistent XSS
No description provided by source. =============================================================================== | | / / / / / / // / / -/ - / // / / / / // / ////,//////,// ///, / // team PUBLIC SECURITY ADVISORY | |...
Wordpress Usernoise Plugin 3.7.8 - Persistent XSS Vulnerability
No description provided by source. Details ============================= Application: Usernoise http://usernoise.karevn.com/ Version: 3.7.8 probably earlier versions as well Type: Wordpress plugin Developer: Nikolay Karev http://karevn.com/ - http://profiles.wordpress.org/karevn/ Vulnerability:...
MemHT Portal 4.0.1 [user agent] Persistent Cross Site Scripting
No description provided by source. !/usr/bin/perl MemHT Portal 4.0.1 Persistent Cross Site Scripting Vulnerability user agent by ZonTa - zontahackersatgmaildotcom After successful inject wait for the admin to view statistic page. Fix is available :...
b2evolution 4.0.3 Persistent XSS Vulnerability
No description provided by source. Source: http://packetstormsecurity.org/files/view/99362/b2evolution403-xss.txt ------------------------------------------------------------------------ Software................b2evolution 4.0.3 Vulnerability...........Persistent Cross-site Scripting Threat...
PragmaMX 1.2.10 Persistent XSS Vulnerability
No description provided by source. TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org ............................. VERSION . 1.12....
Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross Site Scripting Vulnerabilities
No description provided by source. Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site Scripting Vulnerabilities Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ http://www.seagate.com/ Software Link:...
Useresponse <= 1.0.2 - Privilege Escalation & RCE Exploit
No description provided by source. !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles...
Micro CMS 1.0 b1 - Persistent XSS Vulnerability
No description provided by source. Title : Micro CMS Persistent Cross-Site Scripting Vulnerability. Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.micro-cms.com/ Advisory : http://secpod.org/blog/?p=135 http://secpod.org/advisories/SECPODMicroCMS.txt Version :...
Claroline 1.10 Persistent XSS Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Claroline 1.10 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.claroline.net/...
wordpress <= 3.3.1 - Multiple Vulnerabilities
No description provided by source. Trustwave's SpiderLabs Security Advisory TWSL2012-002: Multiple Vulnerabilities in WordPress https://www.trustwave.com/spiderlabs/advisories/TWSL2012-002.txt Published: 1/24/12 Version: 1.0 Vendor: WordPress http://wordpress.org/ Product: WordPress Version...
Front Accounting 2.3RC2 Multiple Persistent XSS Vulnerabilities
No description provided by source. Advisory Name: Multiple Persistent Cross-Site Scripting XSS in Front Accounting Internal Cybsec Advisory Id: 2010-1001-Multiple Persistent XSSs in Front Accounting Vulnerability Class: Permanent Cross-Site Scripting XSS Release Date: 10/29/2010 Affected...
Simple Posting System Multiple Vulnerabilities
No description provided by source. Exploit Title: Simple Posting System Multple Google Dork: inurl:sps.php?old= or inurl:sps.php Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...
SugarCRM Community Edition 6.5.2 (Build 8410) Multiple Vulnerabilities
No description provided by source. SugarCRM Community Edition 6.5.2 Build 8410 multiple vulnerabilities Brendan Coles http://itsecuritysolutions.org/ 2012-07-26 There are multiple security vulnerabilities in SugarCRM Community Edition 6.5.2 Build 8410 which may allow an attacker to take control o...
Lunar CMS 3.3 - Cross-Site Request Forgery / Persistent Cross-Site Scripting
CSRF Add Admin ===============...
D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting
D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname. Checks ...