SpiceWorks IT Ticketing System Cross Site Scripting

Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system CVE: CVE-2014-3740 Vendor: SpiceWorks Product: SpiceWorks IT ticketing system Affected versions: any version below 7.2.00195 Fixed version: 7.2.00195 1. About the application: ======================= SpiceWorks is a...

SpiceWorks 7.2.00174 Cross Site Scripting Vulnerability

SpiceWorks version 7.2.00174 suffers from persistent cross site scripting vulnerabilities. Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link:...

SpiceWorks 7.2.00174 Cross Site Scripting

Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link: http://download.spiceworks.com/Spiceworks.exe Version: 7.2.00174 Latest Tested on: Kali Linux Vendor alerte...

SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting

SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link: http://download.spiceworks.com/Spiceworks.exe Versio...

SpiceWorks 7.2.00174 - Persistent Cross-Site Scripting

Exploit Title: Multiple Stored XSS vulnerabilities in SpiceWorks Ticketing system Date: 12/05/2014 Exploit author: Dolev Farhi @f1nhack Vendor homepage: http://spiceworks.com Software Link: http://download.spiceworks.com/Spiceworks.exe Version: 7.2.00174 Latest Tested on: Kali Linux Vendor alerte...

SpiceWorks 6.0.00993 - Multiple Script Injection Vulnerabilities

SpiceWorks 6.0.00993 - Multiple Script Injection Vulnerabilities !-- Title: Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities Vendor: Spiceworks Inc. Product web page: http://www.spiceworks.com Affected version: 6.0.00993 and 6.0.00966 Summary: The Spiceworks IT Desktop delivers near...

SpiceWorks 6.0.00993 - Multiple Script Injection Vulnerabilities

!-- Title: Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities Vendor: Spiceworks Inc. Product web page: http://www.spiceworks.com Affected version: 6.0.00993 and 6.0.00966 Summary: The Spiceworks IT Desktop delivers nearly everything you need to simplify your IT job. Available in a...

Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities

Summary The Spiceworks IT Desktop delivers nearly everything you need to simplify your IT job. Available in a variety of languages, Spiceworks' single, easy-to-use interface combines Network Inventory, Help Desk, Mapping, Reporting, Monitoring and Troubleshooting. And, it connects you with other ...

Spiceworks 6.0.00993 Cross Site Scripting

Exploit for php platform in category web applications 0day.today 2018-01-10...

Spiceworks 6.0.00993 Cross Site Scripting

!-- Title: Spiceworks 6.0.00993 Multiple Script Injection Vulnerabilities Vendor: Spiceworks Inc. Product web page: http://www.spiceworks.com Affected version: 6.0.00993 and 6.0.00966 Summary: The Spiceworks IT Desktop delivers nearly everything you need to simplify your IT job. Available in a...

Spiceworks Client Version Detection

Binary data 6567.prm...

SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection

Product: SpiceWorks Version: 5.3.75941 Vendor Site: http://www.spiceworks.com/community/ Software Download Link: http://www.spiceworks.com/download/?utmsource=comm-secondary-link&utmmedium=website&utmcampaign=homepage Installer Filename: Spiceworks.exe MD5: 023bd361c0f9402dc07adbc5a72fe31d Contac...

SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting (Authenticated) SQL Injection

SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting Authenticated SQL Injection Product: SpiceWorks Version: 5.3.75941 Vendor Site: http://www.spiceworks.com/community/ Software Download Link:...

Spiceworks 3.6.31847 XSS / XSRF

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-009 - Spiceworks Multiple Vulnerabilities XSS & CSRF Application: Spiceworks 3.6.31847 Vendor: Spiceworks Vendor website: http://www.spiceworks.com Author: Adam Baldwin [email protected] Class: XSS, CSRF I...

Spiceworks HTTP Response Accept Header Handling Overflow DoS

The remote host is running Spiceworks IT Desktop, an application used to inventory, monitor, manage and report on software and hardware assets in small and medium-sized businesses. The installed version of Spiceworks is earlier than 4.0. Such versions are reportedly affected by a buffer overflow...

[NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF)

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-009 - Spiceworks Multiple Vulnerabilities XSS & CSRF Application: Spiceworks 3.6.31847 Vendor: Spiceworks Vendor website: http://www.spiceworks.com Author: Adam Baldwin [email protected] Class: XSS, CSRF I...

Spiceworks 3.6 Overflow

!/usr/bin/python Spiceworks 3.6 Accept Parameter Overflow Remote Crash P.O.C. Written by: SecureState R&D Author: David Kennedy ReL1K Tested on Windows 2003 SP2 R2 Vendor Notified on: 05/11/2009 Vendor Fix: Fixed in version 4.0 esi 000334E0 ASCII "AAAAAAAAAAAAAAAAAA" edi 000334E0 ASCII...

SpiceWorks - query Cross-Site Scripting

SpiceWorks - query Cross-Site Scripting source: https://www.securityfocus.com/bid/43248/info Spiceworks is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

SpiceWorks - 'query' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43248/info Spiceworks is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

SpiceWorks 3.6 - Accept Overflow Crash

SpiceWorks 3.6 - Accept Overflow Crash !/usr/bin/python Spiceworks 3.6 Accept Parameter Overflow Remote Crash P.O.C. Written by: SecureState R&D Author: David Kennedy ReL1K Tested on Windows 2003 SP2 R2 Vendor Notified on: 05/11/2009 Vendor Fix: Fixed in version 4.0 esi 000334E0 ASCII...