246 matches found
JBoss RichFaces Online Persistent Xss Vulnerability
No description provided by source. Name : RichFaces Online Persistent Xss Vulnerability Date : Sept,1 2010 Vendor Url : http://exadel.com/web/portal/home Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt special thanks to : r0073r inj3ct0r.com,L0rd...
JBoss RichFaces Online Persistent Xss Vulnerability
Exploit for php platform in category web applications =================================================== JBoss RichFaces Online Persistent Xss Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...
ReVou Micro Blogging Cross Site Scripting
--------------------------------------- ReVou Micro Blogging Cross Site Scripting --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : ReVou Micro Blogging How To Do It : 1- Sign up 2- Sing in 3-...
EPIC FAIL: new user signups result in plain text email with all login details
After signing up to a JIRA instance, I got an email which simply amazed me - it contained: My username My email address My full name My password It was all there, right before me, in a plain-text unencrypted email sent across a public network. WTF?! I'm not sure which universe that's considered a...
WebMember 1.0 SQL Injection
================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...
XSS vulnerability in Mojo Mail Sign-Up Form
Heya, this is my first post here so go easy on me plz. I posted about this on the Mojo Bug Tracker ages ago and it's just been ignored, and besides, Im losing faith in reporting to the vendor, PHP Arena took the credit for an XSS bug I found in their paFileDB. But anyway, Mojo Mail doesn't filter...