DataWatch Monarch Business Intelligence (BI) 5.1 Blind XPath Injection

DataWatch Monarch BI v5.1 admin section blind XPath injection Class: Input Validation Error Remote: Yes Local: No Published: 26/06/2012 Credit: Raymond Rizk of Dionach Limited [email protected] Vulnerable: DataWatch Monarch BI v5.1 DataWatch's Monarch BI admin section is prone to a blind XPath...

CGI Generic XPath Injection (2nd pass)

By providing specially crafted parameters to CGIs, Nessus was able to get an error from the underlying XPath engine. This error suggests that the CGI is affected by an XPath injection vulnerability. An attacker may exploit this flaw to bypass authentication or read confidential data. %NASLMINLEVE...

SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities

Document Title: =============== SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities Release Date: ============= 2011-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 119 Product & Service Introduction: =============================== Die weltweit groesste SaaS...

SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities

Document Title: =============== SolveDirect SaaS v5.6.3 - XPath & SQL Vulnerabilities Release Date: ============= 2011-07-26 Vulnerability Laboratory ID VL-ID: ==================================== 119 Product & Service Introduction: =============================== Die weltweit groesste SaaS...

Family Connections CMS 2.3.2 stored cross site and XPath injection vulnerability-vulnerability warning-the black bar safety net

Family Connections is an open source content management system, it can be easy and convenient to create a private family site. Family Connections 2.3.2 the presence of the stored cross site and XPath injection vulnerability may lead to sensitive information disclosure. +info: Family Connections C...

Family Connections 2.3.2 - subject HTML Injection

Family Connections 2.3.2 - subject HTML Injection source: https://www.securityfocus.com/bid/47037/info Family Connections is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...

Family Connections CMS 2.3.2 XSS / XML Injection

Family Connections CMS 2.3.2 Stored XSS And XPath Injection function xpathdocument.forms"xpath".submit; function xssdocument.forms"xss".submit; font color="r...

kemana Mullti Vulnerability

Exploit for php platform in category web applications =========================== kemana Mullti Vulnerability =========================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //...

ChatLakTurk Video Sitesi1 Blind SQL XPath injection Vulnerability

Exploit for php platform in category web applications ================================================================= ChatLakTurk Video Sitesi1 Blind SQL XPath injection Vulnerability =================================================================...

Jcow 4.2.0 Blind SQL/XPath injection Vulnerability

Exploit for php platform in category web applications ================================================== Jcow 4.2.0 Blind SQL/XPath injection Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Apache JackRabbit 2.0.0 XPath Injection

Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip Description: "Apache Jackrabbit is a fully...

Apache JackRabbit 2.0.0 webapp XPath Injection Vulnerabilty

Exploit for jsp platform in category web applications =========================================================== Apache JackRabbit 2.0.0 webapp XPath Injection Vulnerabilty =========================================================== Title: Apache JackRabbit webapp XPath Injection Author: ADEO...

Apache JackRabbit 2.0.0 - webapp XPath Injection

Apache JackRabbit 2.0.0 - webapp XPath Injection Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip...

Apache JackRabbit 2.0.0 - webapp XPath Injection

Title: Apache JackRabbit webapp XPath Injection Author: ADEO Security Published: 11/08/2010 Version: 2.0.0 Possible all versions Vendor: http://www.apache.org Download: http://www.apache.org/dyn/closer.cgi/jackrabbit/2.0.0/jackrabbit-2.0.0-src.zip Description: "Apache Jackrabbit is a fully...

PishBini Footbal - Cross-Site Scripting SQL Injection

PishBini Footbal - Cross-Site Scripting SQL Injection Vendor: http://www.p30vel.ir/ Date: 2010-05-27 Author : indoushka Thanks to : Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com ! Contact : [email protected] Home : Bug : XSS/SQL Tested on : windows SP2 Français V.Pnx2 2.0 Dork :...

PishBini Footbal SQL Injection / Cross Site Scripting

======================================================================= PishBini Footbal XSS SQL Vulnerability ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

GuppY 4.5.18 - Blind SQL Injection XPath Injection

GuppY 4.5.18 - Blind SQL Injection XPath Injection ======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © ...

GuppY v4.5.18 Blind SQL/XPath injection Vulnerability

Exploit for php platform in category web applications ===================================================== GuppY v4.5.18 Blind SQL/XPath injection Vulnerability =====================================================...

GuppY 4.5.18 - Blind SQL Injection / XPath Injection

======================================================================================== | Title : GuppY v4.5.18 Blind SQL/XPath injection Vulnerability | Author : indoushka | email : [email protected] | Dork : Site créé avec GuppY v4.5.18 © | Tested on: windows SP2 Français V.Pnx2 2.0 | Bug ...

Yamamah Version 1.00 Mullti Vulnerability

Exploit for php platform in category web applications ========================================= Yamamah Version 1.00 Mullti Vulnerability ========================================= ======================================================================================== | Title : Yamamah Version 1....