scholarships.uwa.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-65959 Description| Value ---|--- Affected Website:| scholarships.uwa.edu.au Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

UWA 2.1.5 /core/lib/core/App.class.php 信息泄漏漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '1768' vul ID version = '1' author = '王畅' vulDate = '2014-12-16' createDate =...

UWA 2.1.5 /core/lib/ext/AFilter.class.php 跨站脚本漏洞

No description provided by source...

UWA 2.2.1 /lib/ctrlr/Member/MemberCtrlr.class.php SQL注入漏洞

No description provided by source. 由于此漏洞需要验证码 不太好自动化 获取数据库名 membermodelid=1&memberid0=exp&memberid1=111,122,select database,1,1,1,1,1,1,1,1,1,1,1%23 获取表前缀 membermodelid=1&memberid0=exp&memberid1=111,122,select tablename from informationschema.tables where tableschema= 0xxxxxx limit...

UWA 2.1.5 /core/tpl/page_trace.php 信息泄漏漏洞

No description provided by source...

CVE-2013-1646

Multiple cross-site scripting XSS vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary web script or HTML via 1 invalid JSON data in a mail-sending POST request, 2 an arbitrary parameter to...

CVE-2013-1646

Multiple cross-site scripting XSS vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary web script or HTML via 1 invalid JSON data in a mail-sending POST request, 2 an arbitrary parameter to...