2341 matches found
CMS Builder 2.14 Cross Site Scripting
CMS Builder vendor: http://www.interactivetools.com/ Version: CMS Builder 2.14 Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: www.epsilonlambda.wordpress.com Google dork: Website powered by CMS Builder...
Elefant CMS 1.0.2 Cross Site Scripting
elefantcms vendor: http://www.elefantcms.com Version: Latest stable release: 1.0.2 Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: www.epsilonlambda.wordpress.com Google dork: Powered by Elefant CMS...
Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability
Exploit for hardware platform in category web applications Title: Yealink VOIP Phone Persistent Cross Site Scripting Vulnerability Product: Yealink Easy VOIP Phone Homepage: http://www.yealink.com/ Impact: Medium Authentication: Required CVE: CVE-2012-1417 Found: 2012-02-21 Author: Narendra Shind...
Wolf CMS 0.7.5 - Multiple Vulnerabilities
Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU...
Wolf CMS v0.7.5 - Multiple Web Vulnerabilities
Document Title: =============== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=452 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 452 Product ...
WonderDesk Cross Site Scripting
Exploit Title: WonderDesk Cross Site Scripting Date: 26.02.2012 Author: Sony Software Link: http://www.wonderdesk.com/ Google Dorks: inurl:wonderdesk.cgi?do Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html...
Xavi 7968 ADSL Router Cross Site Request Forgery / Cross Site Scripting
Xavi 7968 ADSL Router: Persistent cross site scripting XSS / Cross site request forgery CSRF ------------------------------------------------------------------------------------------------ Description: Xavi 7968 Router is completely vulnerable to Persistent cross site scripting XSS and Cross sit...
Jenkins Cross Site Scripting
Exploit Title: Jenkins Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://jenkins-ci.org/ Software Version: 1.408-1.451 maybe other.. Google Dorks : intext:jenkins ver. inurl:/jenkins site:edu or what you want. Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com...
FreeBSD : WebCalendar -- Persistent XSS (2b20fd5f-552e-11e1-9fb7-003067b2972c)
tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine a...
Yoono Desktop 1.8.16 Cross Site Scripting
TITLE: Yoono Desktop Application Persistent XSS vendor: Yoono Version: 1.8.16 Impact: Persistent XSS Software Link: available in yoono site Author: r007k17-w Email: [email protected] Twitter: http://twitter.com/!/r007k17w My blog: http://shadowrootkit.wordpress.com/...
Apache Struts < 2.3.3 Showcase Multiple Persistent XSS Vulnerabilities
Apache Struts Showcase is prone to multiple persistent cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
SmartyCMS 0.9.4 Cross Site Scripting
TITLE: SmartyCMS 0.9.4 Template module Persistent XSS vendor: SmartyCMS Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: Copyright 2007 by SmartyCMS 0.9.4 built 334...
Sphinix Mobile Web Server 3.1.2.47 Multiple Persistent XSS Vulnerabilities
Exploit for windows platform in category web applications Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory : http://secpod.org/blog/?p=453...
PragmaMX 1.2.10 Persistent XSS Vulnerability
Exploit for php platform in category web applications TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org...
PragmaMX 1.2.0 Persistent Cross Site Scripting
TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org ............................. VERSION . 1.12.0...
Silverstripe CMS Cross Site Scripting
|| | | | \ | | / / \ / / | | / \ / | | \ \ / | \ / |\ \ \ /| | | | | | \ |/ | Y Y \ \ / // | / \ \ / |//|| / /|| / /\ | / /|| / / / / / / / silverstripe CMS persisten XSS vulnerabilties vendor: http://demo.silverstripe.org Author: Karthik R 3psil0nLambDa Email:...
Acolyte CMS v1.5 and v6.3 - SQL Injection Vulnerabilities
Document Title: =============== Acolyte CMS v1.5 and v6.3 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=397 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 3...
Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities
Document Title: =============== Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=392 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 3...
Discuz 4.0 头像设置处可以持久型脚本
简要描述： Discuz 4.0 头像设置处可以post xss脚本， 可能是个老漏洞了，在内网的论坛上发现的，不知道是否没升级…… 详细说明： Discuz 4.0 头像设置处，先选一个系统自带头像，提交，抓包。 将头像地址【customavatars/190.jpg】替换为xss脚本【javascript:alert/x/】,post提交后，所有头像引用代码辩位;可以成功执行。 不过引号、，等会被替换或编码，必须构造无引号的语句 漏洞证明：...
