Kandidat CMS 1.4.2 - Persistent Cross-Site Scripting

Vulnerability ID: HTB22648 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinkandidatcms.html Product: Kandidat CMS Vendor: Kan-Studio http://www.kan-studio.ru/ Vulnerable Version: 1.4.2 and probably prior versions Vendor Notification: 19 October 2010 Vulnerability Type: Stored XSS Cro...

Micro CMS Persistent XSS Vulnerability.

Micro CMS Persistent Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1004 09/03/2010 Issue Discovered 09/05/2010 Vendor Notified No Response from Vendor Class: Persistent Cross-Site Scripting Severity: High Overview: --------- Micro CMS is...

Micro CMS v1.0 b1 Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================== Micro CMS v1.0 b1 Persistent XSS Vulnerability ============================================== Class: Persistent Cross-Site Scripting Severity: High Overview: --------- Micro CMS is prone to...

Micro CMS 1.0 b1 - Persistent Cross-Site Scripting

Micro CMS 1.0 b1 - Persistent Cross-Site Scripting Title : Micro CMS Persistent Cross-Site Scripting Vulnerability. Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.micro-cms.com/ Advisory : http://secpod.org/blog/?p=135...

ifnuke - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | img634150553723437500.aspx That 634150553723437500 value is DateTime.Now.Ticks.ToString and will be built in this file : http://Example.com/Modules/PreDefinition/PhotoUpload.ascx.cs...

Ad Network Script - Persistent Cross-Site Scripting

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.kaonsoftwares.com/ Price:330EUR :O Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

CustomCMS - Persistent Cross-Site Scripting

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://customcms.net/ Price:55$ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger gree...

Sijio Community Software - SQL Injection / Persistent Cross-Site Scripting

I'm SiD3^effects member from Inj3ct0r Team Support e-mail : submitatinj3ct0r.com Name : Sijio Community Software SQLi/Persistent XSS Vulnerability Date : july, 7 2010 Critical Level : HIGH Vendor Url : http://www.sijio.com/ Google Dork: © Powered by sijio - Community Software Author : Sid3^effect...

Joomla! Component com_community - Persistent Cross-Site Scripting

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comcommunity Persistent Xss Vulnerability Date : june, 21 2010 Critical Level : HIGH Vendor Url : http://styleware.eu/ DEMO URL :http://bizweb.styleware.eu...

Hexjector 1.0.7.2 - Persistent Cross-Site Scripting

Hexjector 1.0.7.2 - Persistent Cross-Site Scripting Exploit Title: Hexjector Persistent XSS ".""; $url2 is not filtered so XSS codes can be executed. You would need to find a site that is vulnerable either to XSS or SQL Injection to generate this vulnerability.A site that is vulnerable to XSS onl...

DataTrack System 3.5 Cross Site Scripting

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Edimax AR-7084GA Router - Cross-Site Request Forgery Persistent Cross-Site Scripting

Edimax AR-7084GA Router - Cross-Site Request Forgery Persistent Cross-Site Scripting 25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1...

Edimax AR-7084GA Router - Cross-Site Request Forgery / Persistent Cross-Site Scripting

25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1" name="VIRTUALSVRform"...

Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources7CAdvisory By Irene Abezgauz, Hacktics. 22-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, a persistent cross-site scripting vulnerability was identified in the...

Liferay Portal p_p_id parameter vulnerable to persistent cross-site scripting

Overview Liferay Portal is vulnerable to persistent cross-site scripting via the ppid parameter, which can allow a remote, unauthenticated attacker to execute arbitrary script in the context of the portal administrator. Description Liferay Portal is a web portal that can provide Java applets that...

Simplog 0.9.3.2 XSS / XSRF

Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amol Naik amolnaik4atgmail.com Date...

Achievo < 1.4.0 Multiple Vulnerabilities

Binary data 5208.prm...

Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting

Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] +...

Kayako SupportSuite Ticket Subject XSS

According to its banner, the version of Kayako SupportSuite installed on the remote host is earlier than 3.60.04. Such versions are affected by a persistent cross-site scripting vulnerability. Specifically, the installed version fails to sanitize input passed to the subject field while creating a...

[NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite

nGenuity Information Services – Security Advisory Advisory ID: NGENUITY-2009-008 - Ticket Subject Persistent XSS in Kayako SupportSuite Application: SupportSuite v3.50.06 Vendor: Kayako Vendor website: http://www.kayako.com Author: Adam Baldwin [email protected] Class: Persistent...