Apache OFBiz 17.12.03 - Cross-Site Scripting Detection

Apache OFBiz 17.12.03 contains cross-site scripting and unsafe deserialization vulnerabilities via an XML-RPC request. !/usr/bin/env python3 -- coding: utf-8 -- """Apache OFBiz 17.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: inf...

Adobe Experience Manager - Cross-Site Scripting Detection

Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences. !/usr/bin/env python3 -- coding: utf-8 -- """Adobe Experience Manager contains a cross-site scripting vulnerability via setPreferences.""" from kittysploit import from lib.protocols.http.httpclient import...

Open Akamai ARL - Cross-Site Scripting Detection

Open Akamai ARL contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. !/usr/bin/env python3 -- coding: utf-8 -- """Open Akamai ARL contains a cross-site scripting vulnerability.""" from...

Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting Detection

Tiki Wiki CMS Groupware 7.0 is vulnerable to cross-site scripting via the GET "ajax" parameter to snarfajax.php. !/usr/bin/env python3 -- coding: utf-8 -- """Tiki Wiki CMS Groupware 7.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient:...

WP-FaceThumb 0.1 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the paginationwpfacethumb parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in index.""" fro...

AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting Detection

AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. !/usr/bin/env python3 -- coding: utf-8 -- """AWStats is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sa."""...

WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting Detection

Multiple cross-site scripting vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 notify or 2 blog parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Multiple cross-site scripting vulnerabiliti...

WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the package parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting Detection

A cross-site scripting vulnerability in the integrated web server on Siemens SIMATIC S7-1200 CPU devices 2.x and 3.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in the...

Frontend Uploader <= 0.9.2 - Cross-Site Scripting Detection

The Frontend Uploader WordPress plugin prior to v.0.9.2 was affected by an unauthenticated Cross-Site Scripting security vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """The Frontend Uploader WordPress plugin prior to v.""" from kittysploit import from lib.protocols.http.httpclient...

WordPress AJAX Random Post <=2.00 - Cross-Site Scripting Detection

WordPress AJAX Random Post 2.00 is vulnerable to reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress AJAX Random Post 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WordPress AJ...

WordPress e-search <=1.0 - Cross-Site Scripting Detection

Wordpress plugin e-search 1.0 and before contains a cross-site scripting vulnerability via dateselect.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting Detection

WordPress HDW Video Gallery 1.2 and before contains a cross-site scripting vulnerability via playlist.php which allows an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Oracle Content Server - Cross-Site Scripting Detection

Oracle Content Server version 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0 are susceptible to cross-site scripting. The vulnerability can be used to include HTML or JavaScript code in the affected web page. The code is executed in the browser of users if they visit the manipulated site. !/usr/bin/env...

FineCMS <=5.0.10 - Cross-Site Scripting Detection

FineCMS through 5.0.10 contains a cross-site scripting vulnerability in controllers/api.php via the function parameter in a c=api&m=data2 request. !/usr/bin/env python3 -- coding: utf-8 -- """FineCMS through 5.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class...

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting Detection

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Stop User Enumeration 1.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

Zend Server <9.13 - Cross-Site Scripting Detection

Zend Server before version 9.13 is vulnerable to cross-site scripting via the debughost parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Zend Server before version 9.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

Planon <Live Build 41 - Cross-Site Scripting Detection

Planon before Live Build 41 is vulnerable to cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """Planon before Live Build 41 is vulnerable to cross-site scripting.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info ...

Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting Detection

Open-School 3.0, and Community Edition 2.3, allows cross-site scripting via the osv/index.php?r=students/guardians/create id parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Open-School 3.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

NeDi 1.9C - Cross-Site Scripting Detection

NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...