Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 snippets in a user comment, which is not properly handled in a Confluence page, or 2 the user profile display name,...

CVE-2011-4822

Multiple cross-site scripting XSS vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 snippets in a user comment, which is not properly handled in a Confluence page, or 2 the user profile display name,...

XSS vulnerability in a user's comment

We have identified and fixed a stored cross-site scripting XSS vulnerability in the FishEye user profile. Affected versions are all versions earlier than 2.5.5 XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attac...

XSS vulnerability in a user's comment

We have identified and fixed a stored cross-site scripting XSS vulnerability in the FishEye user profile. Affected versions are all versions earlier than 2.5.5 XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attac...

KaiBB 2.0.1 - SQL Injection Arbitrary File Upload

KaiBB 2.0.1 - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/49421/info KaiBB is prone to multiple SQL-injection vulnerabilities and a arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacke...

ICQ vulnerable to account theft using JavaScripts

ICQ vulnerable to account theft using JavaScripts In security advisories for ICQ https://noptrix.net/advisories/icqclixss.txtand the ICQ web site https://noptrix.net/advisories/icqwebxss.txt, security researcher Levent Kayan warns that both the ICQ instant messenger for Windows and the ICQ web si...

BlueSoft Social Networking CMS - SQL Injection

source: https://www.securityfocus.com/bid/48707/info BlueSoft Social Networking CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

OpenCollab 1.4.3 Cross Site Scripting

------------------------------------------------------------------------ Software................OpenCollab 1.4.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.opencollab.de/ Vendor Contact Date.....3/10/2011...

Joomla! Component com_idoblog - SQL Injection

Exploit Title: joomla comidoblog /SQL injection Vulnerability Google Dork: inurl:"comidoblog" Date: 25/12/2010 Author: NOCKAR1111 Location:Algeria AuthorEmail:[email protected] Language: php Tested on: windows xp sp3 en http://extensions.joomla.org/extensions/news-production/blog/9218...

Joomla Community Builder Enhanced Local File Inclusion

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

LFI / RCE vlunerability in Joomla Community Builder Enhenced (CBE) Component

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

Joomla Community Builder Enhenced Component LFI/RCE Vulnerability

Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...

DMXReady Members Area Manager - Persistent Cross-Site Scripting

DMXReady Members Area Manager - Persistent Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXReady Members Area Manager Persistent XSS Vendor url:http://www.dmxready.com/ Version:2 Price:295$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effect...

Buy Dating Persistent Xss

Exploit for php platform in category web applications ========================= Buy Dating Persistent Xss ========================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

iScripts EasyBiller Cross Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ iScripts EasyBiller Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download : http://www.iscripts.com/easybiller/ $ Date : 02/07/2010 $ Emai...

2DayBiz Video Community Portal - user-profile.php SQL Injection

2DayBiz Video Community Portal - user-profile.php SQL Injection $------------------------------------------------------------------------------------------------------------------- $ 2daybiz Video Community portal"user-profile.php" SQL injection $ Author : Sangteamtham $ Home : Hcegroup.net $...

Holiday Travel Portal Upload Vulnerability

Exploit for php platform in category web applications ========================================== Holiday Travel Portal Upload Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass source: https://www.securityfocus.com/bid/40255/info McAfee Email Gateway is prone to a security-bypass vulnerability because the web-based interface fails to properly perform user-profile checks. Attackers can exploit th...

Heaven Soft CMS 4.7 SQL Injection

x Tybe: SQL Injection Vulnerabilities x Vendor: http://www.newyorkindoorcricket.com/ x Script Name: Heaven Soft, CMS Version: 4.7 x author: PrinceofHacking x Team: Ashiyane Digital Security Team x Mail : PrincedotH4ck@gmaildotcom D0rk:"photogalleryshow.php?id" Exploit:...

Heaven Soft CMS v 4.7 photogallery_open.php SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================= Heaven Soft CMS v 4.7 photogalleryopen.php SQL Injection Vulnerability ========================================================================= Author: CoBRa21 Mail:...