webnetseo CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : webnetseo CMS Multiple Vulnerabilities Exploit Author : Ashiyane Digital Security Team Vendor Homepage: webnetseo.net Date : 2017 07 May Category : WebApp MY HOME : Ashiyane.org CWE : CWE-89 - CWE-276 And ... Video :...

CVE-2017-7990

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp...

CVE-2017-7990

The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp...

webapp.library.uvic.ca XSS vulnerability

Vulnerable URL: http://webapp.library.uvic.ca/databases/details.php?id=730=letter:P...

CIOReview names Wallarm in    “20 Most Promising Enterprise WebApp Solution Providers”

CIOReview names Wallarm in “20 Most Promising Enterprise WebApp Solution Providers” We are glad to be short-listed amongst Top-20 most promising solution providers for the web apps by CIOReview. This is a good illustration of how we are helping enterprises to secure their web apps. The award main...

Webapp builder 2.0 - Unauthenticated File Upload

Plugin is still affected and has been closed...

Blizard BB 1.7 (privtmsg) MD5 Hash Retrieve Blind sql injection Exploit

Exploit for php platform in category web applications !/usr/bin/perl ------------------------------------------------------------------------ + Blizard BB 1.7 privtmsg MD5 Hash Retrieve blind sql injection ------------------------------------------------------------------------ Discovered by Juri...

TI Online Examination System 2.0 Admin Password Changer Exploit

Exploit for php platform in category web applications !/usr/bin/perl ------------------------------------------------------------------------ + TI Online Examination System 2.0 Admin Password Changer Exploit ------------------------------------------------------------------------ Discovered by Ju...

CVE-2016-4316

Multiple cross-site scripting XSS vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the 1 setName parameter to identity-mgt/challenges-mgt.jsp; the 2 webappType or 3 httpPort parameter to webapp-list/webappinfo.jsp; the 4 dsName or 5 descriptio...

OLX: Public Vulnerable Version of Confluence https://confluence.olx.com

The public server is vulnerable to Insecure Direct Object Reference, allowing any authenticated user to read configuration files from the application such as the content of webapp directory in confluence. Link to the public issue: https://jira.atlassian.com/browse/CONF-39704 PoC: GET:...

TI Online Examination System 2.0 Admin Login Bypass Vulnerability

Exploit for php platform in category web applications --------------------------------------------------------------------------------------- + TI Online Examination System = 2.0 sql injection Admin Login Bypass -------------------------------------------------------------------------------------...

Posnic 1.03 Unauthorized Password Recovery Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------- + Posnic 1.03 forgetpass.php Unauthorized Password Recovery ------------------------------------------------------------------------ Discovered by Juri Gianni -...

My Photo Gallery 1.0 SQL Injection / Unauthorized Login Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------- + My Photo Gallery 1.0 SQL Injection / Unauthorized Login ------------------------------------------------------------------------ Discovered by Juri Gianni - Turin,Ital...

arxius: XSS in content type header when uploading file.

Hello. First of all I wish you good luck securing your site, as far as I can tell, your site is secured, and this bug is minor. It affects the content type header, when a file with an invalid content-type is uploaded, the value of the content-type file header is echoed back without any filtering...

LocalTapiola: SQL Injection /webApp/cancel_iltakoulu regId parameter (viestinta.lahitapiola.fi)

Basic report information Summary: There is a SQL Injection vulnerability on http://viestinta.lahitapiola.fi/webApp/canceliltakoulu?regId=478836614&locationId=464559674 Domain: viestinta.lahitapiola.fi Steps To Reproduce: Tested on sqlmap framework with following command: ./sqlmap.py -u...

LocalTapiola: Sql injection on /webApp/sijoituswebinaari (viestinta.lahitapiola.fi)

Issue The reporter found a blind SQL Injection attack in an application in viestinta.lahitapiola.fi. Fix The issue was investigated and found to be valid. The fix was to remove the application as it was not needed. Reasoning The reported case was valid and within the scope of the bug bounty...

PHPMailer / Zend-mail / SwiftMailer Remote Code Execution

!/usr/bin/python intro = """\03394m / / / / / / / / / / / / / / / / / / // / / / /// / / / / // / // / // / / / / // / // , / / / ///, /,// // //,///||// // // PHPMailer / Zend-mail / SwiftMailer - Remote Code Execution Exploit a.k.a "PwnScriptum" CVE-2016-10033 + CVE-2016-10045 +...

secure.madametussauds.com XSS vulnerability

Open Bug Bounty ID: OBB-200880 Description| Value ---|--- Affected Website:| secure.madametussauds.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Netgear R7000 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netgear R7000 - XSS via. DHCP hostname Date: 11-12-2016 Exploit Author: Vincent Yiu Contact: https://twitter.com/vysecurity Vendor Homepage: https://www.netgear.com/ Category: Hardware / WebApp Version: V1.0.7.21.1.93 +...

webapp.mis.vanderbilt.edu XSS vulnerability

Vulnerable URL: https://webapp.mis.vanderbilt.edu/olga/?appealCode="// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...