wpadmin.foxnews.com XSS vulnerability

Open Bug Bounty ID: OBB-163468 Description| Value ---|--- Affected Website:| wpadmin.foxnews.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

raybestosgarage.com XSS vulnerability

Vulnerable URL: http://raybestosgarage.com/wp-includes/js/swfupload/swfupload.swf?movieName=%22%29;catch%28e%29if%28!self.a%29self.a=!alert%28/XSSPOSED/%29;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

WordPress < 3.3.2 Multiple Vulnerabilities

Binary data 9101.prm...

PHPWind swfupload.swf flash xss

No description provided by source...

泛微 OA /tools/SWFUpload/upload.jsp 任意文件上传漏洞

发现 tools/SWFUpload/upload.jsp ，并未验证当前用户是否为登录状态，提交文件，可直接写入根目录下。最终得到的文件访问路径为：http://www.xxoo.com/null上传的文件名.jsp。本地构造提交表单form method='post' action='http://www.xxoo.com/tools/SWFUpload/upload.jsp' enctype="multipart/form-data" input type="file" id="file" name="test" style="height:20px;BORDER: 8F908B...

SWFupload 2.5.0 - Cross Frame Scripting (XFS)

SWFupload 2.5.0 - Cross Frame Scripting XFS Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window...

SWFupload 2.5.0 - Cross Frame Scripting (XFS)

Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window Description : XSF occurs when an SWF have...

SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability

Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

SWFUpload - Cross-Site Scripting (XSS)

...

TinyMCE 3.5 - swfupload Cross-Site Scripting

The Ultimate TinyMCE WordPress plugin was affected by a swfupload Cross-Site Scripting security vulnerability...

SWFUpload 2.5.0 Beta 3 - File Arbitrary Upload

No description provided by source. Exploit Title: SWFUpload v2.5.0 Beta 3 File Arbitrary Upload Date: 07/02/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: SWFUpload v2.5.0 Beta 3 Software Link:...

litepublisher 5.72 Cross Site Scripting

Exploit Title: litepublisher 5.72 SWFUpload movieName Cross Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://litepublisher.com Version : 5.72 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Lite Publisher" + Exploit :...

DedeCMS 5.7 /images/swfupload/swfupload.swf 跨站脚本漏洞

No description provided by source...

WordPress global flash galleries插件远程文件上传漏洞

No description provided by source. Exploit : = = = = = = = = = Perl ! /usr/bin/perl use LWP; use HTTP::Request::Common; my $url, $file = @ARGV; my $ua = LWP::UserAgent-new; my $req = POST $url, ContentType = 'form-data', Content = name = $name, galleryselect = 1, Gallery ID popup.php Filedata =...

WordPress NextGen Gallery跨站脚本漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com...

Joomla Melody Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: Joomla Component commelody XSS Vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"components/commelody/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: The Joomla melody component suffers from an xss vulnerability...

Joomla Component com_melody跨站脚本漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Joomla Component commelody XSS Vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"components/commelody/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: The Joomla melody component...

WordPress NextGen Gallery Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress PlugIn NextGen...

osCmax e-Commerce v2.5.3 (FU/ObjectInject) Multiple Vulnerabilities

osCmax e-Commerce v2.5.3 is suffer from multiple vulnerabilities remote attacker can upload file/shell via header attacks or exec a JavaScript Code & Inject a remote Object see also : CVE-2013-4144 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

FreeBSD : wordpress -- multiple vulnerabilities (049332d2-f6e1-11e2-82f3-000c29ee3065)

The wordpress development team reports : - Blocking server-side request forgery attacks, which could potentially enable an attacker to gain access to a site - Disallow contributors from improperly publishing posts - An update to the SWFUpload external library to fix cross-site scripting...