54 matches found
mantisbt: arbitrary code execution and unrestricted access
CVE-2014-7146 arbitrary code execution When importing data with the plugin, user input passed through the "description" field and the "issuelink" attribute of the uploaded XML file isn't properly sanitized before being used in a call to the pregreplace function which uses the 'e' modifier. This...
CVE-2014-3294
Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading 1 web-server access logs, 2 web-server Referer logs, or 3 the browser history, aka Bug ID CSCuj81691...
CVE-2014-3294
Cisco WebEx Meeting Server is affected by CVE-2014-3294, a vulnerability where sensitive information is exposed in URLs due to improper URL content restrictions. An authenticated remote attacker can view the values in URLs, enabling access to sensitive data via web-server access logs, Referer log...
XSS in FilterSubscription
h4. To reproduce: Visit: code:none /secure/FilterSubscription!default.jspa?returnUrl=javascript:alert1 code Click "Cancel" An alert should appear This URL should be restricted to the current domain, and to http/https protocols...
XSS in FilterSubscription
h4. To reproduce: Visit: code:none /secure/FilterSubscription!default.jspa?returnUrl=javascript:alert1 code Click "Cancel" An alert should appear This URL should be restricted to the current domain, and to http/https protocols...
Discuz!X的一个链接限制绕过
简要描述： http://zone.wooyun.org/content/2903 详细说明： 在开启了URL限制的论坛里，是无法直接发URL链接的。当链接中出现了 http://+任意内容 后，就会提示无法发送。但是， /xx.com 却没有过滤，并且可以任意跳转。 漏洞证明： 直接发 http://smtp.yupage.com/301.php 如果发 http://msmtp.yupage.com/301.php 的话，请看这里 http://myhn.qq.com/forum.php?mod=viewthread&tid=116403&page=3pid1856745 ，成功跳出...
ChillyCMS 1.3.0 - Multiple Vulnerabilities
ChillyCMS 1.3.0 - Multiple Vulnerabilities Exploit Title: chillyCMS 1.3.0 Multiple Vulnerabilities Google Dork: "powered by chillyCMS" Date: 15 February 2013 Exploit Author: Abhi M Balakrishnan Vendor Homepage: http://chillycms.bplaced.net/ Software Link:...
chillyCMS 1.3.0 Shell Upload / Access Bypass
Exploit Title: chillyCMS 1.3.0 Multiple Vulnerabilities Google Dork: "powered by chillyCMS" Date: 15 February 2013 Exploit Author: Abhi M Balakrishnan Vendor Homepage: http://chillycms.bplaced.net/ Software Link: http://chillycms.bplaced.net/chillyCMS/media/files/chillyCMSfull.zip Version: 1.3.0...
OneFileCMS 1.1.4 Access Bypass
Exploit Title: OneFileCMS - Failure to Restrict URL Access | Date: 12th March 2012 | Author: Abhi M Balakrishnan | Software Link: https://github.com/rocktronica/OneFileCMS/blob/4340be5355b702c771ef03d4b00c74d358443b38/onefilecms.php | Version: upto 1.1.4 | Tested on: Apache-2.2.17, PHP-5.2.17,...
CVE-2009-4455
The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance Cisco ASA 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web site...
[SA23640] FirePass URL Restriction Bypass Vulnerabilities
TITLE: FirePass URL Restriction Bypass Vulnerabilities SECUNIA ADVISORY ID: SA23640 VERIFY ADVISORY: http://secunia.com/advisories/23640/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: FirePass 5.x http://secunia.com/product/4695/ DESCRIPTION: Michael...
[SA23626] FirePass URL Restriction Bypass
TITLE: FirePass URL Restriction Bypass SECUNIA ADVISORY ID: SA23626 VERIFY ADVISORY: http://secunia.com/advisories/23626/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: FirePass 6.x http://secunia.com/product/13146/ FirePass 5.x...
CVE-2007-0187
CVE-2007-0187 affects F5 FirePass 5.4–5.5.2 and 6.0. Remote attackers can access restricted URLs by bypassing checks through (1) trailing null byte, (2) multiple leading slashes, (3) Unicode encoding, (4) URL-encoded directory traversal or same-directory chars, or (5) upper-case domain letters. T...
