JVN#28344798 Cisco IOS cross-site scripting vulnerability

Some versions of the Cisco IOS provide a web-based interface to configure the device. This web-based interface contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest firmware provided by...

FreeBSD : vinagre -- format string vulnerability (214e8e07-d369-11dd-b800-001b77d09812)

CORE Security Technologies reports : A format string error has been found on the vinagreutilsshowerror function that can be exploited via commands issued from a malicious server containing format string specifiers on the VNC name. In a web-based attack scenario, the user would be required to...

Text Lines Rearrange Script (filename) File Disclosure Vulnerability

No description provided by source. + Text Lines Rearrange Script download.php filename File Disclosure Vulnerability + Discovered By SirGod + Visit : www.h4cky0u.org + Greetz : All my friends + File Disclosure Vulnerability Vulnerable Code in download.php :...

[SECURITY] Fedora 8 Update: phpPgAdmin-4.2.2-1.fc8

phpPgAdmin is a fully functional web-based administration utility for a PostgreSQL database server. It handles all the basic functionality as well as some advanced features such as triggers, views and functions stored procedures. It also has Slony-I support...

[SECURITY] Fedora 10 Update: phpPgAdmin-4.2.2-1.fc10

phpPgAdmin is a fully functional web-based administration utility for a PostgreSQL database server. It handles all the basic functionality as well as some advanced features such as triggers, views and functions stored procedures. It also has Slony-I support...

[SECURITY] Fedora 9 Update: phpPgAdmin-4.2.2-1.fc9

phpPgAdmin is a fully functional web-based administration utility for a PostgreSQL database server. It handles all the basic functionality as well as some advanced features such as triggers, views and functions stored procedures. It also has Slony-I support...

[SECURITY] Fedora 8 Update: phpMyAdmin-3.1.1-1.fc8

phpMyAdmin is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently it can create and drop databases, create/drop/alter tables, delete/edit/add fields, execute any SQL statement, manage keys on fields, manage privileges,export data into various formats a nd ...

phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl phpPgAdmin = 4.2.1 Local File Inclusion Vulnerability Script: "phpPgAdmin is a web-based...

phpPgAdmin 4.2.1 - '_language' Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl phpPgAdmin 136 ... // Determine language file to import: // 1. Check for the language from a request var if isset$REQUEST'language'...

phpPgAdmin 4.2.1 - _language Local File Inclusion

phpPgAdmin 4.2.1 - language Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl phpPgAdmin 136 ... // Determine language file to import: // 1. Check for the...

phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== phpPgAdmin 136 ... // Determine language file to import: // 1. Check for the language from a request var if isset$REQUEST'language' && isset$appLangFiles$REQUEST'language'...

raemedia-sql.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Web Based Contact Management Auth Bypass SQL Injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

Rae Media Contact MS (Auth Bypass) SQL Injection Vulnerability

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Web Based Contact Management Auth Bypass SQL Injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

Rae Media Contact MS (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Rae Media Contact MS Auth Bypass SQL Injection Vulnerability ============================================================== AUTHOR : b3hz4d Seyed Behzad Shaghasemi DATE : 03 De...

Rae Media Contact MS - Authentication Bypass

Rae Media Contact MS - Authentication Bypass +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Web Based Contact Management Auth Bypass SQL Injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

JVN#70599814 I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability

The HDL-F series products provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. Configuration of these devices are done through a web-based interface. This web interface is vulnerable to cross-site request forgery. Impact If a user views a malicious web page while logged into th...

qshop-sqlxss.txt

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Q-Shop 3.0 - Cross-Site Scripting / SQL Injection

000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 000 0 0 0...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via 1 the elementid parameter in a generatedreportresults action to the ReportTree program, 2 the jnlpnam...

CVE-2008-5043

CVE-2008-5043 involves multiple cross-site scripting (XSS) flaws in the web-based interface of IBM Metrica Service Assurance Framework. The vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via three parameters: elementid in generatedreportresults (ReportTree...