263 matches found
SQL Injection and Cross-Site Scripting Vulnerabilities in Esmay's Non-Book Resource Management System
Esmay Non-Book Resource Management System can help librarians conveniently manage accompanying books, accompanying CD-ROMs and other non-paper resources, and help patrons directly search, browse online, operate online, partially download, and fully download the CD-ROMs they need. There are SQL...
XSS Vulnerability in Oceanis Cloud Browser
Oceanis Cloud Browser is a cross-platform cloud service browser with a dual-core engine developed by Maxthon. An XSS vulnerability exists in Oceanis Cloud Browser, which can be exploited by attackers to implant cross-site code and obtain sensitive information such as user cookies...
zzcms8. 1 a stored xss+csrf can steal all the user cookies
No description provided by source...
XSS Vulnerability in mlecms V2.3
mlecms is a multi-language, free and open source content management system. An XSS vulnerability exists in mlecms V2.3. An attacker can exploit this vulnerability to obtain sensitive information such as user cookies...
XSS Vulnerability in X6CMS
X6CMS, the full name of Xiaoliu Website Content Management System. X6CMS is a fully functional marketing website management platform with PHP+MYSQL architecture. X6CMS has XSS vulnerability. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...
Joomla com_akobook component cross-site scripting vulnerability
Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL. A cross-site scripting vulnerability exists in the Joomla comakobook component. It allows attackers to construct XSS statements, perform pop-up box operations, and obtain information such as user...
XSS Vulnerability in WeiPHP, an Open Source WeChat Public Platform Development Framework
WeiPHP is an easy to build, scalable open source WeChat public platform development framework, you can easily build a belong to their own WeChat public account operation platform. Open source WeChat public platform development framework WeiPHP index.php in the root directory exists an xss...
DedeCMS stored xss vulnerability
Vulnerability description: Dedecms is an open source PHP open source website management system. Dedecms member function shopsdelivery. in php des parameters there is stored XSS vulnerability, the attacker may exploit the vulnerability to obtain the users cookie. Test environment: DedeCMS-V5...
IBM Kenexa LMS on Cloud Cross-Site Scripting Vulnerability
IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS developed by IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and sha...
21CN Email Client - Micro Mail IOS Version XSS Vulnerability
Micro Mail is a multi-mailbox management mobile client, mobile office tools for personal and business users. XSS vulnerability exists in the IOS version of 21CN Email Client - MicroMail, which allows attackers to insert malicious js code into the page to obtain user cookies and other information,...
New Relic: Session Management Flaw
Hi, Sir I found a Vulnuberlity in your Website. Called Session Management Flaw You can Know More About This Flaw through OWASP Guide https://www.owasp.org/index.php?title=BrokenAuthenticationandSessionManagement&setlang=en in this Loop Hole The Application Is Not Destroying the Session After...
HotExBilling Manager 73 Cross Site Scripting
Title: ==== HotExBilling Manager Cross-site scripting XSS vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-2781 Date: ==== 12-03-2015 dd/mm/yyyy Vendor: ====== Hotspot Express has been in the billing solution business sinc...
CVE-2014-6029
TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...
Code injection
TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...
Stored XSS Vulnerability found on Atlassian
Hi ! My name is Andi Rrahmani and i am an Independent Security Researcher. I am writing this email to let you know of a Stored XSS Vulnerability that i found on atlassian.com . You will have the POC as an atachment to this report that i am making. Now i will show you in details how i managed to...
Stored XSS Vulnerability found on Atlassian
panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-47027. panel Hi ! I am writing this email to let you know of a Stored XSS Vulnerability that i found on atlassian.com . You will...
ThinkSAAS 2.2-beta 存储型XSS
简要描述： 富文本过滤不严格导致可植入恶意脚本盗取用户cookies 详细说明： 对比了一下 WooYun: Thinksaas存储型XSS ，发现确实更新了。我就无耻的来了。 下面是对富文本过滤的代码片段： function cleanJs$text $text = trim $text ; //$text = stripslashes $text ; // 完全过滤注释 $text = pregreplace '//', '', $text ; // 完全过滤动æ€ä»£ç $text = pregreplace '//', '',...
Taobao fraud and a module XSS vulnerabilities can steal user cookies-vulnerability warning-the black bar safety net
First let's look at TaobaoXSSvulnerability ! Taobao decoration can invoke a third-party module, this means that this third party template if there is a vulnerability even being invaded are likely implicated in Taobao shop! Edit the third party Module, added toXSScode, and then the shop calls ! Op...
ForeScout CounterACT reflected XSS vulnerability
Overview The ForeScout CounterACT appliance contains reflected cross-site scripting XSS vulnerabilities. Description The web interface of the ForeScout CounterACT appliance contains reflected XSS vulnerabilities CWE-79. The following are a couple...
Tech-ex v6. 5 CMS Oday-vulnerability warning-the black bar safety net
Background: writing website kesion directory such as http://localhost cookies: after login to grab the USER's COOKIES Account password: after registration you can log in as normal user name and password Code: the login code, grab the figure after the fill The operation,first enter the site,first...