Netsweeper 4.0.3 - Cross Site Scripting Injection Vulnerability

Exploit for php platform in category web applications +---------------------------------------------------+ + Netsweeper 4.0.3 - Cross Site Scripting Injection + +---------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com Version : 4.0.3...

D-Link DSL-500B Gen 2 - Parental Control Configuration Panel Persistent Cross-Site Scripting

D-Link DSL-500B Gen 2 - Parental Control Configuration Panel Persistent Cross-Site Scripting !/usr/bin/perl Date dd-mm-aaaa: 13-02-2015 Exploit for D-Link DSL-500B G2 Cross Site Scripting XSS Injection Stored in todmngr.tod Developed by Mauricio Corrêa XLabs Information Security WebSite:...

XSS injection in backoffice

More info at https://thelia.net/version-2-1-2-with-security-fix...

XSS injection in backoffice

More info at https://thelia.net/version-2-1-2-with-security-fix...

D-Link DSL-2730B Modem - Lancfg2get.cgi Persistent Cross-Site Scripting

D-Link DSL-2730B Modem - Lancfg2get.cgi Persistent Cross-Site Scripting Exploit Title: D-Link DSL-2730B Modem lancfg2get.cgi Exploit XSS Injection Stored Date: 11-01-2015 Exploit Author: Mauricio Correa Vendor Homepage: www.dlink.com Hardware version: C1 Version: GE 1.01 Tested on: Windows 8 and...

D-Link DSL-2730B Modem - XSS Injection Stored Exploit Lancfg2get.cgi Exploit

Exploit for hardware platform in category web applications Exploit Title: D-Link DSL-2730B Modem lancfg2get.cgi Exploit XSS Injection Stored Date: 11-01-2015 Exploit Author: Mauricio Correa Vendor Homepage: www.dlink.com Hardware version: C1 Version: GE 1.01 Tested on: Windows 8 and Linux...

D-Link DSL-2730B Modem - XSS Injection Stored Exploit DnsProxy.cmd Exploit

Exploit for hardware platform in category web applications Exploit Title: D-Link DSL-2730B Modem dnsProxy.cmd Exploit XSS Injection Stored Date: 11-01-2015 Exploit Author: Mauricio Correa Vendor Homepage: www.dlink.com Hardware version: C1 Version: GE 1.01 Tested on: Windows 8 and Linux...

D-Link DSL-2730B Modem - Cross-Site Scripting Injection Stored DnsProxy.cmd

Exploit Title: D-Link DSL-2730B Modem dnsProxy.cmd Exploit XSS Injection Stored Date: 11-01-2015 Exploit Author: Mauricio Correa Vendor Homepage: www.dlink.com Hardware version: C1 Version: GE 1.01 Tested on: Windows 8 and Linux !/usr/bin/perl Date dd-mm-aaaa: 11-11-2014 Exploit for D-Link...

CVE-2014-9219

Cross-site scripting XSS vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

MyBB MyBBlog 1.0 Cross Site Scripting

Title : MyBB MyBBlog 1.0 Plugin Cross Site Scripting Author : DevilScreaM Date : 24 October 2014 Category : Web Applications Vendor : https://github.com/JN-Jones/MyBBlog Download : http://community.mybb.com/mods.php?action=view&pid=221 Version : 1.0 Greetz : newbie-security.or.id | Borneo Securit...

ntopng 1.2.0 XSS injection using monitored network traffic

ntopng 1.2.0 XSS injection using monitored network traffic ntopng is the next generation version of the original ntop, a network traffic probe and monitor that shows the network usage, similar to what the popular top Unix command does. The web-based frontend of the software is vulnerable to...

CVE-2014-3040: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2; Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x...

Fedora 19 : phpMyAdmin-4.2.6-1.fc19 (2014-8577)

phpMyAdmin 4.2.6.0 2014-07-17 =============================== - Undefined index warning with referenced column. - $cfg'MaxExactCount' is ignored when BROWSING is back - Multi Column sorting improved user experience - Server validation does not work while in setup/mysqli - Undefined variable when...

Invision Power Board <= 2.1.7 ACTIVE XSS/SQL Injection Exploit

No description provided by source. ---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / /...

Zeeways Script Multiple Vulnerabilities

No description provided by source. ======================================================================= Zeeways Script Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

CiviCRM 3.1 < Beta 5 Multiple XSS Vulnerabilities

No description provided by source. Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: 3.1 Beta 5, Tested on 3.1 Beta 1 Tested on: BT4 pre-final Greetz ...

MileHigh Creative (SQL/XSS/HTML Injection) Multiple Vulnerabilities

No description provided by source. ======================================================================= MileHigh Creative SQL/XSS/HTML Injection Multiple Vulnerabilities =======================================================================...

LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection, Absolute Path Disclosure, XSS Injection, Arbitrary File Upload...

PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13561/info PwsPHP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Spaceacre (index.php) SQL/HTML/XSS Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Spaceacre index.php SQL/HTML/XSS Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Scrip...