195 matches found
[FOREGROUND SECURITY 2012-001] Lsoft ListServ v16 (WA revision R4241) SHOWTPL parameter Cross-SIte Scripting - XSS
============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2012-001 - Original release date: August 16, 2012 - Discovered by: Jose Carlos de Arriba Penetration Testing Team Lead at Foreground Security - Contact: jcarriba at foregroundsecurity dot com, dade...
JVN#03582364: YY-BOARD vulnerable to cross-site scripting
YY-BOARD is a bulletin-board software. YY-BOARD contains a vulnerability in handling web form entries, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...
JVN#33171616: WEB PATIO vulnerable to cross-site scripting
WEB PATIO is a bulletin-board software. WEB PATIO contains a vulnerability in handling web form entries, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...
A.M.Y CSRF (change admin password)
Exploit for php platform in category web applications Exploit Title: A.M.Y CSRF change admin password Author: Jonturk75 Category:: webapps Demo site: http://calendarscripts.info/demos/amy/admin.php Email me when a new advertiser signs up. 0day.today 2018-04-09...
PHP < 5.3.9 Multiple DoS Vulnerabilities - Windows
PHP is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if...
JVN#76515037: PukiWiki Plus! vulnerable to cross-site scripting
PukiWiki Plus! is a software that adds wiki functionality to websites. PukiWiki Plus! contains a vulnerability in handling web form entries, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the...
CVE-2011-3984
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...
Cross site scripting
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...
CVE-2011-3984
Cross-site scripting XSS vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "web form entries."...
CVE-2011-3984
CVE-2011-3984 is an XSS vulnerability in KENT-WEB WEB FORUM (versions 5.1 and earlier) that can be triggered via web form entries to inject arbitrary script/HTML. Public details indicate remote injection possibilities, with related entries noting multiple XSS issues in the same product. Remediati...
InverseFlow 2.4 - Cross-Site Request Forgery (Add Admin)
Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities Add Admin User + Version : 2.4 + Author : EjRaM HaCkEr + Contact : m2z9.cn + Dork : inurl:"ticket.php?cmd=lost" + Software Link : http://asria.info/download/script/inverseflow.zip...
OsCSS 1.2 - Arbitrary File Upload
OsCSS 1.2 - Arbitrary File Upload Exploit Title: OsCSS Remote File Upload Exploit Date: 12-1-2010 Author: Shichemt Alen Software Link: None Version: 1.2 Platform / Tested on: Windows XP SP2 DE & Ubuntu 10.10 category: webapps/0day Dork : inurl:"sorry script'kiddies" Contact : [email protected]...
cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)
cPanel 11.x - Cross-Site Request Forgery Edit E-mail Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 --------------------------------------------------------------------------------------...
HP Power Manager code execution
Buffer overflow during authentication via web form. Buffer overflow in /goform/formExportDataLogs, directory traversal...
OpenCA HTML injection
OpenCA is vulnerable to a HTML injection attack due to inadequate validation / filtering of user input into a web form frontend. SPDX-FileCopyrightText: 2009 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Code injection
Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form...
CVE-2009-1590
CVE-2009-1590 concerns CGI RESCUE FORM2MAIL prior to 1.42, where a vulnerability in an HTML form-enabled mailer allows a remote attacker to cause arbitrary recipient emails to be sent. Connected sources (JVN/JVNDB, Red Hat, NVD) confirm: FORM2MAIL could send emails independent of configuration, e...
CVE-2009-1590
Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form...
