906 matches found
MODx Revolution 2.0.3 Addresses Pair of Vulnerabilities
The MODx Revolution 2.0.3 release addresses a pair of reported security vulnerabilities with MODx Revolution 2.0.2-pl and possibly earlier releases: Input passed via the "modhash" parameter to manager/index.php is not properly sanitized before being returned to the user and input passed via the...
MODx Revolution 2.0.2-pl Local File Inclusion
------------------------------------------------------------------------ Software................MODx Revolution 2.0.2-pl Vulnerability...........Local File Inclusion Download................http://modxcms.com Release Date............9/28/2010 Tested On...............Windows Vista + XAMPP...
MODx Revolution 2.0.2-pl Cross Site Request Forgery
img...
MODx Revolution 2.0.2-pl Cross Site Scripting
------------------------------------------------------------------------ Software................MODx Revolution 2.0.2-pl Vulnerability...........Reflected Cross-site Scripting Download................http://modxcms.com Release Date............9/28/2010 Tested On...............Windows Vista + XAM...
Fashione E-Commerce Webshop - Multiple SQL Injections
/ / / / / / / / / / // / / / / ///// // Exploit Title: Fashione E-Commerce Webshop Multiple SQL Injection Vulnerabilities Date: 2010-09-19 Author: secret Contact : [email protected] / ICQ : 17-33-77 Site : swissfaking.net/board Software Link: http://www.fashione.co.uk/ Version: All...
xt:Commerce Gambio 2008 2010 - reviews.php Error-Based SQL Injection
xt:Commerce Gambio 2008 2010 - reviews.php Error-Based SQL Injection / / / / / / / / / / // / / / / ///// // Exploit Title: xt:Commerce Gambio 2008 - 2010 ERROR Based SQL Injection "reviews.php" Date: 2010-09-18 Author: secret Contact : [email protected] / ICQ : 17-33-77 Site :...
REvolution 10.02 - Cross-Site Request Forgery
REvolution 10.02 - Cross-Site Request Forgery Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability...
REvolution 10.02 - Cross-Site Request Forgery
Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status:...
REvolution <= 10.02 CSRF (Cross-Site Request Forgery)
Exploit for php platform in category web applications ===================================================== REvolution &Xfiles=footerafter&confirm=1 " Solution: Upgrade to the most recent verison 0day.today 2018-01-02...
NPDS REvolution 10.02 Cross Site Request Forgery
Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status:...
XSRF (CSRF) in NPDS REvolution
Vulnerability ID: HTB22367 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 06 May 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status:...
XSS vulnerability in NPDS REvolution
Vulnerability ID: HTB22365 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 01 May 2010 Vulnerability Type: XSS Cross Site Scripting Status:...
Stored XSS vulnerability in NPDS REvolution
Vulnerability ID: HTB22366 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinnpdsrevolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 04 May 2010 Vulnerability Type: Stored XSS Cross Site...
NPDS REvolution 10.02 - admin.php Cross-Site Request Forgery
NPDS REvolution 10.02 - admin.php Cross-Site Request Forgery source: https://www.securityfocus.com/bid/40331/info NPDS Revolution is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue to compromise the affected application, steal cookie-based authentication...
NPDS REvolution 10.02 - 'admin.php' Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/40331/info NPDS Revolution is prone to a cross-site request-forgery vulnerability. Attackers can exploit this issue to compromise the affected application, steal cookie-based authentication credentials, perform unauthorized actions, and disclose or modify...
NPDS REvolution 10.02 - 'download.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/40227/info NPDS Revolution is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
NPDS REvolution 10.02 - download.php Cross-Site Scripting
NPDS REvolution 10.02 - download.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40227/info NPDS Revolution is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
NPDS REvolution Blind SQL Injection
Vulnerability ID: HTB22364 Reference: http://www.htbridge.ch/advisory/blindsqlinjectionvulnerabilityinNPDSREvolution.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 29 April 2010 Vulnerability Type: Blind SQL Injecti...
NPDS REvolution Cross Site Scripting
Vulnerability ID: HTB22363 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinnpds.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 29 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixe...
XSS vulnerability in NPDS
Vulnerability ID: HTB22363 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinnpds.html Product: NPDS REvolution Vendor: NPDS Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor Notification: 29 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixe...