CVE-2014-4187

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

CVE-2014-4187

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

CVE-2014-4187: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in signup.php in ClipBucket allows remote attackers to inject arbitrary web script or HTML via the Username field...

Simple E-Document 1.31 SQL Injection

Exploit: Simple e-document v1.31 Login Bypass + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777sec + version: Simple e-document v1.31 + Vendor Homepage: http://sourceforge.net/projects/simplee-doc/files/ 1 Sql Injection on username field PoC: username=-4731' OR 2708=2708 Burp...

Simple E-document 1.31 - Authentication Bypass

Exploit: Simple e-document v1.31 Login Bypass + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777sec + version: Simple e-document v1.31 + Vendor Homepage: http://sourceforge.net/projects/simplee-doc/files/ 1 Sql Injection on username field PoC: username=-4731' OR 2708=2708 Burp...

CVE-2012-6626: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field...

Persistent XSS in Username field

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46732. panel The XSS vulnerability is only present in some parts of the UI where the username is incorrectly marked as "safe" fo...

Persistent XSS in Username field

The XSS vulnerability is only present in some parts of the UI where the username is incorrectly marked as "safe" for HTML output. Known vulnerability points: When viewing a user's activity stream on their profile page When viewing the site-wide activity stream in the Administrative UI This...

Cross site scripting

Cross-site scripting XSS vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field...

CVE-2013-1823: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field...

PT-2013-3408 · Red Hat · Red Hat Subscription Asset Manager

Name of the Vulnerable Software and Affected Versions: Red Hat Subscription Asset Manager versions prior to 1.2.1 Description: A cross-site scripting XSS issue exists in the Notifications form, allowing remote attackers to inject arbitrary web script or HTML via the username field. This could...

Cross site scripting

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

CVE-2012-0936

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

CVE-2012-0936: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in web/springframework/security/SecurityAuthenticationEventOnmsEventBuilder.java in OpenNMS 1.8.x before 1.8.17, 1.9.93 and earlier, and 1.10.x before 1.10.1 allows remote attackers to inject arbitrary web script or HTML via the Username field, related to...

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the username field. NOTE: some of these details are obtained from third party information...

BlogPHP 2 Cross Site Scripting

Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested on: CVE : How to exploit: 1- Go...

BlogPHP v2 Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/downloa...

CVE-2011-1524: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management login GUI page in Symantec LiveUpdate Administrator LUA before 2.3 allows remote attackers to inject arbitrary web script or HTML via the username field, as demonstrated by injecting an IFRAME element into the event log, a different...