Webglimpse 2.x - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52170/info Webglimpse is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal...

Webglimpse 2.x - Multiple Cross-Site Scripting Vulnerabilities

Webglimpse 2.x - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52170/info Webglimpse is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Webglimpse Brute Force / Cross Site Scripting

Hello list! I want to warn you about new security vulnerabilities in Webglimpse in addition to previous ones. These are Brute Force and Cross-Site Scripting vulnerabilities. During 2008-2009 I've disclosed multiple vulnerabilities in Webglimpse http://securityvulns.com/source15611.html, such as...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: information leak, crossite scripting, directory traversal, authentication bypass...

Multiple vulnerabilities in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденных мною множественных уязвимостях в Webglimpse. Это Full path disclosure, Cross-Site Scripting, Directory Traversal и Authorization bypass уязвимости. Уязвимости в админке Webglimpse в которую можно попасть через гостевой аккаунт, или захватив кукис админ...

WebGlimpse 2.18.7 - 'DOC' Directory Traversal

source: https://www.securityfocus.com/bid/52651/info WebGlimpse is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to retrieve arbitrary files in th...

WebGlimpse 2.18.7 - DOC Directory Traversal

WebGlimpse 2.18.7 - DOC Directory Traversal source: https://www.securityfocus.com/bid/52651/info WebGlimpse is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal...

Cross-Site Scripting vulnerability in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Webglimpse. Данную уязвимость я обнаружил ещё в 2007 году, когда нашёл уязвимость на сайте Секретной Разведывательной Службы Великобритании MI6, SIS. XSS:...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting...

Cross-Site Scripting vulnerabilities in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting уязвимостях в локальной поисковой системе Webglimpse. XSS IE: Уязвимости в webglimpse.cgi в параметрах case, whole, lines, errors, age, filter и wordspan...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting. CimWebCenter: crossite scripting...

Cross-Site Scripting vulnerabilities in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в локальной поисковой системе Webglimpse. XSS IE: Уязвимости в webglimpse.cgi в параметрах autosyntax и autonegate. http://site/webglimpse.cgi?ID=1&query=12345&autosyntax=22style3D22xss:expressionalertdocument.cook...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting. CimWebCenter: crossite scripting...

CVE-2005-4354

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4354

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4354

CVE-2005-4354 is a documented XSS vulnerability in Webglimpse 2.14.1 and earlier, exploitable via the query parameter on webglimpse.cgi. The connected documents do not provide explicit exploit details, affected versions beyond the stated range, or concrete remediation steps. The NVD entry notes a...

CVE-2005-4354: Undefined Security Weakness

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4328

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2005-4328

Webglimpse 2.14.1 and earlier is affected by an XSS in webglimpse.cgi, exploitable via the ID parameter to inject arbitrary script/HTML. Remote attackers could exploit this to achieve script execution in the vulnerable web page. The description does not specify patched versions or remediation ste...

CVE-2005-4328

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...