138 matches found
CVE-2020-23371
CVE-2020-23371 is a cross-site scripting (XSS) vulnerability in noneCms v1.3.0, affecting the SWF file static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf. The issue allows remote attackers to inject arbitrary script or HTML via the movieName parameter. The connected CNVD/CNNVD ent...
NoneCms 跨站脚本漏洞
NoneCms is a simple and compact open-source content management system that can be used to quickly build corporate sites, personal blogs, and support mobile. NoneCms 1.3.0 version of static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf cross-site scripting vulnerability. The...
ferrimmobiliare.com XSS vulnerability
Open Bug Bounty ID: OBB-551004 Description| Value ---|--- Affected Website:| ferrimmobiliare.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...
edline.net XSS vulnerability
Open Bug Bounty ID: OBB-549779 Description| Value ---|--- Affected Website:| edline.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
joliet86.org XSS vulnerability
Open Bug Bounty ID: OBB-549774 Description| Value ---|--- Affected Website:| joliet86.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
steger.webster.k12.mo.us XSS vulnerability
Open Bug Bounty ID: OBB-549772 Description| Value ---|--- Affected Website:| steger.webster.k12.mo.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Design/Logic Flaw
v5/config/system.php in dayrui FineCms 5.2.0 has a default SYSKEY value and does not require key regeneration for each installation, which allows remote attackers to upload arbitrary .php files via a member api swfupload action to index.php...
CVE-2017-16920: Undefined Security Weakness
v5/config/system.php in dayrui FineCms 5.2.0 has a default SYSKEY value and does not require key regeneration for each installation, which allows remote attackers to upload arbitrary .php files via a member api swfupload action to index.php...
File upload vulnerability in finecms latest version v5.0.8
FineCMS is a content management system based on PHP+MySql. A file upload vulnerability exists in the swfupload function in Api.php in FineCMS version 5.0.8, which can be exploited by remote attackers to upload arbitrary files...
泛微 OA /js/swfupload/swfupload.swf xss漏洞
No description provided by source...
wpadmin.foxnews.com XSS vulnerability
Open Bug Bounty ID: OBB-163468 Description| Value ---|--- Affected Website:| wpadmin.foxnews.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
raybestosgarage.com XSS vulnerability
Vulnerable URL: http://raybestosgarage.com/wp-includes/js/swfupload/swfupload.swf?movieName=%22%29;catch%28e%29if%28!self.a%29self.a=!alert%28/XSSPOSED/%29;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...
WordPress < 3.3.2 Multiple Vulnerabilities
Binary data 9101.prm...
PHPWind swfupload.swf flash xss
No description provided by source...
泛微 OA /tools/SWFUpload/upload.jsp 任意文件上传漏洞
发现 tools/SWFUpload/upload.jsp ，并未验证当前用户是否为登录状态，提交文件，可直接写入根目录下。最终得到的文件访问路径为：http://www.xxoo.com/null上传的文件名.jsp。本地构造提交表单form method='post' action='http://www.xxoo.com/tools/SWFUpload/upload.jsp' enctype="multipart/form-data" input type="file" id="file" name="test" style="height:20px;BORDER: 8F908B...
SWFupload 2.5.0 - Cross Frame Scripting (XFS)
SWFupload 2.5.0 - Cross Frame Scripting XFS Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window...
SWFupload 2.5.0 - Cross Frame Scripting (XFS)
Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window Description : XSF occurs when an SWF have...
SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability
Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...
