244 matches found
CVE-2017-14973
IDenticard Two-Reader Controller Configuration Manager 1.18.8 396 is vulnerable to Stored Cross-Site Scripting XSS via the notes field in /userhandler?file=loggedin.shtm aka the edit user page...
CVE-2017-14973
IDenticard Two-Reader Controller Configuration Manager 1.18.8 396 is vulnerable to Stored Cross-Site Scripting XSS via the notes field in /userhandler?file=loggedin.shtm aka the edit user page...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 First name or 2 Last name field in the HUE Users page...
Advantech WebAccess 8.1 Post Authentication Credential Collector Exploit
Usage Info msf use auxiliary/gather/advantechwebaccesscreds msf auxiliaryadvantechwebaccesscreds show actions ...actions... msf auxiliaryadvantechwebaccesscreds set ACTION msf auxiliaryadvantechwebaccesscreds show options ...show and set options... msf auxiliaryadvantechwebaccesscreds run This...
Nanjing Guanbao Technology Development Co., Ltd. Guanbao online examination system has logical design flaws and loopholes
Nanjing Guanbao Technology Development Co. Guanbao online examination system is a comprehensive examination system. A logical design flaw exists in the FrmOtherRegUser.aspx page of the Nanjing Guanbao Technology Development Co. It allows an attacker to use the isnew parameter to determine whether...
красноярск.su XSS vulnerability
Vulnerable URL: http://красноярск.su/user?a=0=';alert/XSSPOSED/;...
MantisBT SQL Injection Vulnerability
MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A SQL injection vulnerability exists in the manageuserpage.php script in MantisBT versions 1.2.18 and earlier and...
Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS
No description provided by source. Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + FirstLastNames 1.3.2...
Click&BaneX Multiple Remote SQL Injection Vulnerabilities
No description provided by source. -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Click&BaneX download : null Demo : http://icash.ch/ClickAndBanexDemo/user/ %00...
CVE-2012-6556
Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...
CVE-2012-6556
Multiple cross-site scripting XSS vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 User/FirstName or 2 User/LastName parameter to the edit user page. NOTE: some of these details are obtained from third...
CVE-2012-3952
Cross-site scripting XSS vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter to the user page...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/index.php in phpList before 2.10.19 allows remote attackers to inject arbitrary web script or HTML via the unconfirmed parameter to the user page...
Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS
Exploit for php platform in category web applications Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + FirstLastNames 1.3.2...
The "user" Dark Features page is vulnerable to XSRF/csrf
The "User Dark Features" page located at $host/secure/ViewProfile.jspa?selectedTab=jira.user.profile.panels:up-darkfeatures-panel allows users to add dark features which only affect themselves. However, it is not protected against XSRF attacks. Note: the 'value' of dark features is not properly...
Wind noise dotNETCMS 0day-vulnerability warning-the black bar safety net
Brief description: File upload Detailed description: Vulnerability in the user page, the registered user. Article management, upload of.. Select the file name unchanged.... Upload 1. asp;,jpg And then you know Vulnerability to prove: ! ! !...
Allow user accounts to require two-factor authentication using RFC 4226
panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Cloud. Using JIRA Server? See the corresponding suggestion|http://jira.atlassian.com/browse/JRASERVER-20999. panel New feature request. In light of the recent security hack at Apache, it might be prudent for JIRA to provide some more secure...
Click&BaneX - Multiple SQL Injections
-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Click&BaneX download : null Demo : http://icash.ch/ClickAndBanexDemo/user/ %00 http://icash.ch/ClickAndBanexDemo/admin/ Exploits :...
minddezignpg-admin.txt
!/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...