otrs -- information disclosure

The OTRS Project reports: An attacker with a valid agent login could manipulate URLs in the ticket watch mechanism to see contents of tickets they are not permitted to see...

Remote command execution in fastreader ruby gem

Ruby gem fastreader-1.0.8 remote code exec 3/6/2013 if the url contains any ; characters code will be executed as the user. for example if fastreader is fed http://www.g;id;.com id will be executed. ./fastreader-1.0.8/lib/entrycontroller.rb .strip only removes whitespace before and after the URL...

Winamp - MAKI Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Winamp MAKI Buffer Overflow',...

CVE-2012-3540

Open redirect vulnerability in views/authforms.py in OpenStack Dashboard Horizon Essex 2012.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to auth/login/. NOTE: this issue was originally assigned CVE-2012-3542 by...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Script i...

Moderate: Red Hat Security Advisory: conga security, bug fix, and enhancement update

Updated conga packages that fix multiple security issues, several bugs, and add one enhancement are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, whic...

Unfixed Redirect vulnerability at kjram.halfoffdeals.com

Security researcher p0pc0rn, has submitted on 22/12/2011 a Redirect vulnerability affecting kjram.halfoffdeals.com, which at the time of submission ranked 136338 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently unfixe...

CVE-2011-4714

Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files via a .. backslash dot dot in the URL...

CVE-2011-3694

The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL...

Unfixed XSS vulnerability at www.highered.tafensw.edu.au

Security researcher Invectus, has submitted on 07/09/2011 a cross-site-scripting XSS vulnerability affecting www.highered.tafensw.edu.au, which at the time of submission ranked 85192 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. I...

CVE-2011-0048

Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 creates a clickable link for a 1 javascript: or 2 data: URI in the URL aka bugfileloc field, which allows remote attackers to conduct cross-site scripting XSS attacks against logged-out users via a crafted UR...

Unfixed XSS vulnerability at www.hostlogr.com

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting www.hostlogr.com, which at the time of submission ranked 20260 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currently...

[shopex.cn] - 3 处源代码下载、泄漏敏感信息漏洞

简要描述： 可通过 URL 直接下载或查看 Web 程序目录结构、源代码、 Subversion 服务器地址、有权限修改程序的账号等信息。 详细说明： 漏洞证明： http://dev.shopex.cn/.svn/entries http://book.shopex.cn/.svn/entries http://jnc.saas-telcom.shopex.cn/.svn/entries...

Unfixed XSS vulnerability at www.wingclips.com

Security researcher nullbyt3, has submitted on 17/07/2010 a cross-site-scripting XSS vulnerability affecting www.wingclips.com, which at the time of submission ranked 372738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Joomla Component com_mv_restaurantmenumanager SQL Inj Vulnerability

Exploit for php platform in category web applications ========================================================================= Joomla Component commvrestaurantmenumanager SQL Injection Vulnerability ========================================================================= :: General information ...

Unfixed XSS vulnerability at uniradioinforma.com

Security researcher Jath, has submitted on 03/07/2010 a cross-site-scripting XSS vulnerability affecting uniradioinforma.com, which at the time of submission ranked 450883 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

CVE-2010-0716

layouts/Upload.aspx in the Documents module in Microsoft SharePoint before 2010 uses URLs with the same hostname and port number for a web site's primary files and individual users' uploaded files aka attachments, which allows remote authenticated users to leverage same-origin relationships and...

CVE-2010-0664

Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/childprocesssecuritypolicy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service memory consumption and application crash via a URL that specifies multiple...

CVE-2009-2945

weblogin/login.fcgi aka the WebLogin login script in Stanford University WebAuth 3.5.5, 3.6.0, and 3.6.1 places passwords in URLs in certain circumstances involving conversion of a POST request to a GET request, which allows context-dependent attackers to discover passwords by reading 1 web-serve...

Security expert: do not ignore the URL vulnerability-vulnerability warning-the black bar safety net

Some time ago, the public security organs cracked a network company program theft cases, the analysis a bit, the main problem still lies in URL vulnerability. To test whether the presence of the URL vulnerabilities, the most simple method is in the Request. QueryString added to a’, as shown in th...