WordPress GD bbPress Attachments 2.1 Cross Site Scripting / Local File Inclusion Vulnerabilities

WordPress GD bbPress Attachments plugin version 2.1 suffers from a cross site scripting and Local File Inclusion Vulnerabilities Details ================ Software: GD bbPress Attachments Version: 2.1 Homepage: http://wordpress.org/plugins/gd-bbpress-attachments/ Advisory report:...

ds58.ru XSS vulnerability

Vulnerable URL: http://www.ds58.ru/firms/?text=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3964285 Google Pagerank| 2 VIP...

esbay.fr XSS vulnerability

Open Bug Bounty ID: OBB-62899 Description| Value ---|--- Affected Website:| esbay.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

sgd.fitec.org.br XSS vulnerability

Open Bug Bounty ID: OBB-61720 Description| Value ---|--- Affected Website:| sgd.fitec.org.br Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

cURL/libcURL Remote Security Restriction Bypass Vulnerability

cURL/libcURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. cURL/libcURL versions 6.0-7.39.0 contain a URL request injection vulnerability in the implementation of parseurlandfillconn, which can be exploited by attackers to bypass...

CVE-2014-6215

CVE-2014-6215 is an XSS vulnerability in IBM WebSphere Portal. Versions affected include 6.1.0.x (up to 6.1.0.6 CF27), 6.1.5.x (up to 6.1.5.3 CF27), 7.0.0 before 7.0.0.2 CF29, 8.0.0 up to 8.0.0.1 CF14, and 8.5.0 before CF03. Root cause: improper validation of user-supplied input enables reflected...

Phabricator: Content Spoofing through URL

Hello I hope this is upto the level you guys think of accepting reports. Specified content can be injected into the webpage as text using the URL Consider this...

PhpOnlineChat 3.0 - XSS

No description provided by source. Exploit Title: phponlinechat xss Date: 5/9/2014 Exploit Author: N0 Feel Vendor Homepage: http://phponlinechat.com/phpchat Software Link: http://phponlinechat.com/chat-free-download.php Version: 3.0 Tested on: win7 php online chat suffer from xss in user panel -...

CVE-2014-3057

The CVE-2014-3057 entry affects IBM WebSphere Portal 7.x and 8.x (up to 8.0.0.1 CF12) via the Unified Task List (UTL) Portlet. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML through a crafted URL. Exploitation details, af...

VMware View Portal <= 3.1 XSS vulnerability

No description provided by source. DSECRG-09-058 Vmware View - XSS vulnerability Source:http://www.dsecrg.com/pages/vul/show.php?id=158 Linked XSS in VMware Portal Digital Security Research Group DSecRG Advisory DSECRG-09-058 Application: VMware View Portal Versions Affected: = 3.1 Vendor URL:...

AnotherPHPBook (APB) 1.3.0 (Auth Bypass) - SQL Injection Vulnerability

No description provided by source. APBook 1.3.0 Login Bypass SQL Injection Vulnerability AUTHOR: n3w7u Download: www.clanscripte.net/main.php?content=download&do=dl&dlid=81 Dorks: inurl:apbook/index.php or AnotherPHPBook APB v.1.3.0 © 2001 by Stephan Baumeister zap Exploit:...

Woltlab Burning Board Teamsite Hack <= 3.0 - ts_other.php SQL Injection Exploit

No description provided by source. ----------------------------Information----------------------------------------------------- +Name : Woltlab Burning Board Teamsite Hack V3.0 tsother.php SQL Injection Exploit Python +Autor : Easy Laster +Date : 21.03.2010 +Script : Woltlab Burning Board Teamsit...

DSA-2882-1 extplorer - security update

Bulletin has no description...

CVE-2013-3281

Cross-site scripting XSS vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6,...

CVE-2013-3281

Cross-site scripting XSS vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7 SP2 P07, Documentum Web Publisher before 6.5 SP7, Documentum Digital Asset Manager before 6.5 SP6,...

CVE-2013-4941

Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...

Apache Struts URL includeParams Attribute OGNL Code Injection

Added: 07/18/2013 CVE: CVE-2013-2115 BID: 60167 OSVDB: 93645 Background Apache Struts is an open-source web application framework for developing Java EE web applications. It uses and extends the Java Servlet API to encourage developers to adopt a model-view-controller MVC architecture. Problem...

[Vega v1.0] Web Application Security Scanner

Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting XSS, inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux , OS X , and Window...

CVE-2013-0502

CVE-2013-0502 is an XSS vulnerability in IBM InfoSphere Information Server Web Console. The IBM Security Bulletin confirms affected versions: 8.1, 8.5 (FP3), 8.7 (FP2), and 9.1, with exploitation via malformed URLs that could inject arbitrary web script or HTML. The root cause is input handling i...

Chengdu provident arbitrary account password modification vulnerability-vulnerability warning-the black bar safety net

Detailed description: Vulnerability one:modify any account password. csrf vulnerabilities+logic vulnerabilities. On the site, if you need to change the password is required to enter the original password. But not at all, Plus is the get value will cause the vulnerability to... As long as that oth...