3795 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the Listings extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 url parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...
CVE-2014-9477: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Listings extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 url parameter...
PT-2015-4234
Name of the Vulnerable Software and Affected Versions MediaWiki Listings extension affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the name or...
PT-2015-5043
Name of the Vulnerable Software and Affected Versions Brother MFC-J4410DW printer with firmware before L Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the url parameter to "general/status.html" and possibly other pages...
CVE-2015-1056: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages...
CVE-2015-1051
Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter...
CVE-2014-10037
DomPHP 0.83 and earlier is affected by a directory traversal vulnerability. The Nuclei template details that an attacker can exploit via a part of the URL parameter to photoalbum/index.php (.. traversal) to read, modify, or delete sensitive files on the server. The CVE entry confirms this issue w...
PT-2015-3681
Name of the Vulnerable Software and Affected Versions DomPHP versions 0.83 and earlier Description A directory traversal issue exists, allowing remote attackers to have an unspecified impact by including a .. dot dot in the url parameter to the "photoalbum/index.php" endpoint. Recommendations For...
CVE-2014-10037: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in DomPHP 0.83 and earlier allows remote attackers to have unspecified impact via a .. dot dot in the url parameter to photoalbum/index.php...
PHPDug has multiple cross-site scripting vulnerabilities
PHPDug is an open source social news site that supports sharing stories, news, images and more. PHPDug 2.0.0 suffers from multiple cross-site scripting vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the storyurl parameter to addstoryphp editprofilephp, and...
CVE-2014-7293
Cross-site scripting XSS vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services PDS allows remote attackers to inject arbitrary web script or HTML via the url parameter...
PT-2015-3926
Name of the Vulnerable Software and Affected Versions Ex Libris Patron Directory Services PDS NYU OpenSSO Integration versions 2.1 and earlier Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. This c...
CVE-2014-7293: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services PDS allows remote attackers to inject arbitrary web script or HTML via the url parameter...
PT-2015-3925
Name of the Vulnerable Software and Affected Versions Ex Libris Patron Directory Services PDS NYU OpenSSO Integration versions 2.1 and earlier Description A cross-site scripting XSS issue exists in the logon page, allowing remote attackers to inject arbitrary web script or HTML via the url...
CVE-2014-7294: Undefined Security Weakness
Open redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services PDS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
Ex Libris Patron Directory Services 2.1 Cross Site Scripting
CVE-2014-7293 Ex Libris Patron Directory Services PDS XSS Cross-Site Scripting Security Vulnerability Exploit Title: Ex Libris Patron Directory Services PDS Logon Page url Parameter XSS Product: Ex Libris Patron Directory Services PDS Vendor: Ex Libris Vulnerable Versions: 2.1 and probability pri...
Ex Libris Patron Directory Services 2.1 Open Redirect
CVE-2014-7294 Ex Libris Patron Directory Services PDS Open Redirect Security Vulnerability Exploit Title: Ex Libris Patron Directory Services PDS Logon Page url Parameter Open Redirect Product: Ex Libris Patron Directory Services PDS Vendor: Ex Libris Vulnerable Versions: 2.1 and probability prio...
大汉系统又一SQL注入
简要描述： 大汉系统又一SQL注入 详细说明： Url： /vc/vc/para/oprinitvc.jsp?webid=1+and+1=1-- 截图： ./sqlmap.py -u 'http://www.sinotrans.com/vc/vc/para/oprinitvc.jsp?webid=1' --dbms Oracle ./sqlmap.py -u 'http://www.sinotrans.com/vc/vc/para/oprinitvc.jsp?webid=1' --current-user 漏洞证明： 案例：...
PT-2014-8876
Name of the Vulnerable Software and Affected Versions Morfy CMS version 1.05 Description The issue allows remote authenticated users to inject arbitrary PHP code into config.php via the site url parameter in install.php. Recommendations For Morfy CMS version 1.05, avoid using the site url paramet...