MODx 0.9.6.1 - htcmime.php Source Code Information Disclosure

MODx 0.9.6.1 - htcmime.php Source Code Information Disclosure source: https://www.securityfocus.com/bid/27096/info MODx is prone to a vulnerability that allows attackers to access source code because the application fails to properly sanitize user-supplied input. An attacker can exploit this...

MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure

source: https://www.securityfocus.com/bid/27096/info MODx is prone to a vulnerability that allows attackers to access source code because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...

InfoSoft FusionCharts 3 - .swf Flash File Remote Code Execution

InfoSoft FusionCharts 3 - .swf Flash File Remote Code Execution source: https://www.securityfocus.com/bid/27109/info InfoSoft FusionCharts is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue t...

SiteScape Forum - dispatch.cgi Tcl Command Injection

SiteScape Forum - dispatch.cgi Tcl Command Injection source: https://www.securityfocus.com/bid/26963/info SiteScape Forum is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary commands in th...

SiteScape Forum - 'dispatch.cgi' Tcl Command Injection

source: https://www.securityfocus.com/bid/26963/info SiteScape Forum is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary commands in the context of the webserver process. Successful exploi...

rooter VDSL Device (Goahead WEBSERVER) Disclosure Vulnerability

No description provided by source. -------------------------------------------------------------------------------- WebServer powered by goahead WEBSERVER Vulnerability on : FS4104-AW - Full-Service VDSL Device exemple : IP : 81.240.1.1 to 81.240.1.254 / port : 80 exploit :...

rooter VDSL Device (Goahead WEBSERVER) Disclosure Vulnerability

Exploit for hardware platform in category remote exploits =============================================================== rooter VDSL Device Goahead WEBSERVER Disclosure Vulnerability ===============================================================...

FS4104-AW VDSL Device (Rooter) - GoAhead WebServer Disclosure

FS4104-AW VDSL Device Rooter - GoAhead WebServer Disclosure -------------------------------------------------------------------------------- WebServer powered by goahead WEBSERVER Vulnerability on : FS4104-AW - Full-Service VDSL Device exemple : IP : 81.240.1.1 to 81.240.1.254 / port : 80 exploit...

FS4104-AW VDSL Device (Rooter) - GoAhead WebServer Disclosure

-------------------------------------------------------------------------------- WebServer powered by goahead WEBSERVER Vulnerability on : FS4104-AW - Full-Service VDSL Device exemple : IP : 81.240.1.1 to 81.240.1.254 / port : 80 exploit : =http://ip/goform/QuickStartc0 =source =password disclosu...

PHP Security Framework - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/26898/info PHP Security Framework is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and remote file-include issues. A successful exploit may allow an attacker to execute malicious code within the context of the...

PHP Security Framework - Multiple Input Validation Vulnerabilities

PHP Security Framework - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/26898/info PHP Security Framework is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and remote file-include issues. A successful exploit may...

VisualShapers EZContents 1.4.5 - File Disclosure

source: https://www.securityfocus.com/bid/26737/info VisualShapers ezContents is prone to a vulnerability that allows remote attackers to display the contents of arbitrary local files in the context of the webserver process. An attacker can exploit this issue to retrieve potentially sensitive...

VisualShapers EZContents 1.4.5 - File Disclosure

VisualShapers EZContents 1.4.5 - File Disclosure source: https://www.securityfocus.com/bid/26737/info VisualShapers ezContents is prone to a vulnerability that allows remote attackers to display the contents of arbitrary local files in the context of the webserver process. An attacker can exploit...

Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information

Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure...

Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Remote File Access

source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...

Absolute News Manager .NET 5.1 - '/pages/default.aspx?template' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...

ht://Dig Htsearch跨站脚本漏洞

ht://Dig是一款用来webserver的索引和搜索文件的应用程序。 ht://Dig不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题是由于'sytnax.html'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得目标用户敏感信息。 测试方法 http://foo.bar/cgi-bin/htsearch?config=&restrict=&exclude=&method=and&format=builtin-long&sort=scriptalert"foo"/script&words=foo ht://Dig...

Absolute News Manager .NET 5.1 - pagesdefault.aspx?template Cross-Site Scripting

Absolute News Manager .NET 5.1 - pagesdefault.aspx?template Cross-Site Scripting source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues...

Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...

Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx?rmore' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...