34 matches found
HackerOne: Submitting report through Embedded Submission form gives user indefinite access to a profile
Summary: Hi team, @jobert , @ben After testing on the sandbox, I noticed that one of my accountswhich I removed from the program can see some of the information. I don't know if it affects other programs that have other States - private-only, private-only whit external link. I could not find the...
Debian DLA-1592-1 : otrs2 security update
Two security vulnerabilities were discovered in OTRS, a Ticket Request System, that may lead to privilege escalation or arbitrary file write. CVE-2018-19141 An attacker who is logged into OTRS as an admin user may manipulate the URL to cause execution of JavaScript in the context of OTRS...
HackerOne: Embedded submission form UUIDs can be enumerated through GraphQL node interface, exposing sensitive program details
It's possible for an attacker to enumerate embedded submission form UUIDs through HackerOne's GraphQL node interface. In normal application behavior, an embedded submission form is queried through GraphQL with a UUID. These UUIDs are random and they're not susceptible to brute force attacks...
Design/Logic Flaw
Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...
CVE-2018-19143
Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...
CVE-2018-19143
Open Ticket Request System OTRS 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled...
HackerOne: SQL injection in GraphQL endpoint through embedded_submission_form_uuid parameter
The embeddedsubmissionformuuid parameter in the /graphql endpoint is vulnerable to a SQL injection. Execute the following command to reproduce the behavior: Locally: curl -X POST http://localhost:8080/graphql?embeddedsubmissionformuuid=1%27%3BSELECT%201%3BSELECT%20pgsleep\30%3B--%27...
WP-EMail <= 2.67.2 - Cross-Site Scripting (XSS)
If the Plugin is activated then the email submission form can be found on the /email/ directory on individual Post/Pages. For example: http://example.com/2017/05/31/hello-world/email/...
WP-EMail <= 2.67.1 - SQL Injection
If the Plugin is activated then the email submission form can be found on the /email/ directory on individual Post/Pages. For example: http://example.com/2017/05/31/hello-world/email/...
WordPress User Submitted Posts 20151113 Cross Site Scripting
Exploit Title: WordPress User Submitted Posts Plugin Persistent XSS Discovery Date: 2016-02-10 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: https://plugin-planet.com/ Software Link: https://wordpress.org/plugins/user-submitted-posts/ Version:...
wordpress ucan post plugin <= 1.0.09 - Stored XSS
No description provided by source. Exploit Title: Wordpress uCan Post plugin = 1.0.09 Stored XSS Dork: inurl:/wp-content/plugins/ucan-post/ Date: 2012/01/18 Author: Gianluca Brindisi gATbrindi.si @gbrindisi http://brindi.si/g/ Software Link:...
WordPress Paid Business Listings 1.0.2 - Blind SQL Injection
No description provided by source. Exploit Title: WordPress Paid Business Listings v1.0.2 Blind SQL Injection Date: 6/29/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.blazingtorch.com/ Software Link: http://downloads.wordpress.org/plugin/paid-business-listings.1.0.2.zip Version: 1.0...
Cross site scripting
Cross-site scripting XSS vulnerability in Big Blue Guestbook allows remote attackers to inject arbitrary web script or HTML via the message field in the guestbook entry submission form...
