SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability

Document Title: =============== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=769 DELL Sonicwall Bug ID DSBID: 123995 Release Date: ============= 2012-12-18 Vulnerability Laboratory ID VL-ID:...

SonicWall SonicOS 5.8.1.8 WAF Cross Site Scripting

Title: ====== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability Date: ===== 2012-12-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=769 Sonicwall Bug ID SBID: 123995 VL-ID: ===== 769 Common Vulnerability Scoring System: ==================================== 3....

SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability

Document Title: =============== SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=769 DELL Sonicwall Bug ID DSBID: 123995 Release Date: ============= 2012-12-18 Vulnerability Laboratory ID VL-ID:...

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0...

MyBB Xbox Live ID Post SQLi & Persistent XSS Vulnerabilities

Exploit for php platform in category web applications MyBB Xbox Live ID Post SQLi & Persistent XSS This a really easy one to exploit, user input is not sanitized at all and so is injected into the database as the following lines: if isset$mybb-input'xli' $xli-userupdatedata'xli' = $mybb-input'xli...

MyBB AJAX Chat - Persistent Cross-Site Scripting

MyBB AJAX Chat - Persistent Cross-Site Scripting Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability li...

Cisco Wireless Lan Controller 7.2.110.0 XSS / CSRF / DoS

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @ Independent Security Evaluators Software: Cisco Wireless Lan...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2...

Cisco Wireless Lan Controller 7.2.110.0 Multiple Vulnerabilities

Exploit for hardware platform in category dos / poc Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u email protected? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @...

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst...

MyBB ChangUonDyu Extra File Chatbox Persistent XSS Vulnerability

Popular inferno-like chatbox built for MyBB! ChangUonDyu Extra File Chatbox Persistent XSS Location: Chatbox Notice Vendor: http://community.mybb.com/thread-63559.html PoC: function buildnotice global $fcbfile,$smilies; $noticef = filegetcontents$fcbfile'notice'; $handle =...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @ Independent Security Evaluators Software: Cisco Wireless Lan...

MyBB AJAX Chat - Persistent Cross-Site Scripting

Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability lies within the chatframe.php page. Persistent /...

MyBB AJAX Chat Persistent XSS Vulnerability

Exploit for php platform in category web applications Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Category: Webapps Version: 1 Tested on: Windows The Persiste...

Paypal Core Bug Bounty #3 - Persistent Web Vulnerability

Document Title: =============== Paypal Core Bug Bounty 3 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=635 Release Date: ============= 2012-12-12 Vulnerability Laboratory ID VL-ID: ==================================== 635...

Enterpriser16 LB v7.1 - Multiple Web Vulnerabilities

Document Title: =============== Enterpriser16 LB v7.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=785 Release Date: ============= 2012-12-11 Vulnerability Laboratory ID VL-ID: ==================================== 785...

SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...

Enterpriser16 LB v7.1 - Multiple Web Vulnerabilities

Document Title: =============== Enterpriser16 LB v7.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=785 Release Date: ============= 2012-12-11 Vulnerability Laboratory ID VL-ID: ==================================== 785...

SimpleInvoices 2011.1 Cross Site Scripting

Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...