Vacation Rental Script 4.0 - CSRF Vulnerability

No description provided by source. Exploit Title: Vacation Rental Script v4.0 XSRF VULNERABILTY Google Dork: 2006 - 2009 Vacation Rental Script Date: 24.12.2010 Author: OnurTURKESHAN Software Link: http://www.vacationrentalscript.com/ Version: v.4.0 Tested on: v4.0 TEsted +WorKs ResPecT My FrienD...

VidiScript 1.0.3a Cross Site Scripting

. \ /| | \ \ \ \ | | | | / \ / \ /\ / \ / / / / / \ /\ / \ / / / | | | Y \ / \ | | \ /\ \ \ | | /\ /\ / || || /\ \ /|| / /// \ /|| \ // / / / / / / http://thecrowscrew.org Exploit Title: VidiScript Persistent XSS Vulnerability Author: Gabby Google Dork: Powered By VidiScript...

Website Toolbox Cross Site Scripting

Exploit Title: Website Toolbox Cross Site Scripting Date: 7.04.2012 Author: Sony Software Link: http://websitetoolbox.com Web Browser : Mozilla Firefox Site : http://insecurity.ro PoC: http://st2tea.blogspot.com/2012/04/website-toolbox-cross-site-scripting.html...

XWiki Enterprise Multiple Cross-Site Scripting Vulnerabilities

The host is running XWiki Enterprise and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikienterprisemultxssvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ XWiki Enterprise Multiple Cross-Site Scripting Vulnerabilities Authors: Rachana Shetty Copyright:...

CVE-2012-0979: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in TWiki allows remote attackers to inject arbitrary web script or HTML via the organization field in a profile, involving 1 registration or 2 editing of the user...

Ready for your close up: Profile Management

The profile editing section is the brains of the Google+’s privacy, providing a versatile interface that allows you to customize how you share each and every nugget of your information. Those who want to really be open can share personal details and their demographics with billions of Internet...

Billwerx RC v3.1 Multiple Vulnerabilities

No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...

Viscacha 0.8 Gold persistant XSS vulnerability

Exploit for unknown platform in category web applications ============================================== Viscacha 0.8 Gold persistant XSS vulnerability ============================================== Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/...

Viscacha 0.8 Gold Cross Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...

Cross site scripting

Cross-site scripting XSS vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2008-5891

Cross-site scripting XSS vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2008-5891: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the profile editing functionality in Injader before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information...

CVE-2007-1182

CVE-2007-1182 affects WebAPP prior to version 0.9.9.5, allowing remote Guest users to edit a Guest profile. The impact is described as unknown in the source, with no explicit remediation details provided in the connected documents.

PBLangXSS.txt

Who's got the magic stick? It sure as hell ain't 50 Cent. Excuse me for posting again within minutes but I did not properly check the other forms. In UCP.php, when editing your profile, in several fields you can inject code into the page, just as in the SendPm.php. EX: Input table: "URL"...

My-forum.org cookies vulnerability - data bug

I discovered a security issue that affects the following my-forum.org release: FOROS v.3.2 - http://my-forum.org/index.php?id=Ingles When you are logged in with an account, you need edit the cookie of the site and change the value where your username is and replace it for the victim's username...

freestats-cgi.txt

Date: Sat, 21 Nov 1998 12:54:41 -0500 From: John Carlton To: [email protected] Subject: Freestats.com CGI vulnerability About a year ago I developed an exploit for the free web stats services offered at freestats.com, and supplied the webmaster with proper code to patch the bug. After hearing ...