Cross site scripting

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting XSS attacks via the WriteIntoLocalDisk method...

CVE-2013-2586

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting XSS attacks via the WriteIntoLocalDisk method...

CVE-2013-2586

CVE-2013-2586 affects XAMPP 1.8.1. The /xampp/lang.php page fails to restrict access, letting an unauthenticated user write to lang.tmp on local disk and trigger XSS via WriteIntoLocalDisk. Multiple sources (NVD/OpenVAS/Exploit-DB/Seebug) corroborate remote write access and local file modificatio...

OrangeHRM 2.6.3 (PluginController.php) Local File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................OrangeHRM 2.6.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.orangehrm.com/ Discovery...

XAMPP <= 1.7.3 multiple vulnerabilites

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...

nuBuilder 10.04.20 Local File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................nuBuilder 10.04.20 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/nubuilder/files/ Release...

AIOCP 1.4.001 CSRF Vulnerability

No description provided by source. Source: http://packetstormsecurity.org/files/view/98247/AIOCP-1.4.001-xsrf.txt !------------------------------------------------------------------------ Software................AIOCP All In One Control Panel 1.4.001 Vulnerability...........Cross-site Request...

Jcow 4.2.1 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Jcow 4.2.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.jcow.net/ Discovery...

XAMPP for Windows 1.6.8 'phonebook.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31586/info XAMPP for Windows is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

XAMPP Linux 1.6 ming.php text Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30535/info XAMPP for Linux is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Web2Project 2.3 - SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery...

mySeatXT 0.1781 SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................mySeatXT 0.1781 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://sourceforge.net/projects/myseat/ Discovery...

serva32 1.2.00 rc1 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................Serva32 1.2.00 RC1 Vulnerability...........Denial Of Service Threat Level............Serious 3/5 Download................http://www.vercot.com/serva/ Discovery...

XAMPP Linux 1.6 iart.php text Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30535/info XAMPP for Linux is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Graugon Forum 1.3 - SQL Injection Vulnerability

No description provided by source. !------------------------------------------------------------------------ Software................Graugon Forum 1.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.graugon.com/ Discovery...

Front Accounting 2.3.4 CSRF Vulnerability

No description provided by source. Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested On...............Windows Vista +...

i-doIT 0.9.9-4 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/ Discovery...

OpenEMR 4.0.0 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................OpenEMR 4.0.0 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.oemr.org/ Discovery...

OPS Old Post Spinner 2.2.1 Wordpress Plugin LFI Vulnerability

No description provided by source. Source: http://packetstormsecurity.org/files/view/98751/WordPressOPSOldPostSpinner2.2-lfi.txt ------------------------------------------------------------------------ Software................WordPress OPS Old Post Spinner 2.2 Vulnerability...........Local File...

XAMPP 1.8.1 (lang.php, WriteIntoLocalDisk method) - Local Write Access Vulnerability

No description provided by source. 通过访问以下链接： http://www.example.com/xampp/lang.php?WriteIntoLocalDisk 发现以下文件已经被修改： http://www.example.com/xampp/lang.tmp EXPLOIT-DB来源：https://www.exploit-db.com/exploits/28654/...