LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection, Absolute Path Disclosure, XSS Injection, Arbitrary File Upload...

Invision Power Board <= 2.1.7 ACTIVE XSS/SQL Injection Exploit

No description provided by source. ---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / /...

MileHigh Creative (SQL/XSS/HTML Injection) Multiple Vulnerabilities

No description provided by source. ======================================================================= MileHigh Creative SQL/XSS/HTML Injection Multiple Vulnerabilities =======================================================================...

Marinet cms SQL/XSS/HTML Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Marinet cms SQL/XSS/HTML Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

ManageEngine OpStor Build 8300 and earlier contain multiple vulnerabilities

Overview ManageEngine OpStor Build 8300 and earlier contain multiple vulnerabilities. Description CWE-472: External Control of Assumed-Immutable Web ParameterIt has been reported that the 'Properties.do?name=' module is vulnerable to an ‘unauthorized function call’ caused by server failing to...

[Wapiti 2.3.0] Web Application Vulnerability Scanner

Wapiti allows you to audit the security of your web applications. It performs "black-box" scans, i.e. it does not study the source code of the application but will scans the webpages of the deployed webapp, looking for scripts and forms where it can inject data. Once it gets this list, Wapiti act...

LinkedIn Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2012-003 - Original release date: 16th December 2012 - Last revised: 26th September 2013 - Discovered by: Eduardo Garcia Melia - Severity: 6.8/10 CVSS Base Scored ============================================= I...

live800聊天窗口定向xss（本地域权限）

简要描述： 可以给客服发送xss。 详细说明： 可以给客服发送xss，但是服务端那边是直接运行html的，没有cookie，不过可以给客服发网马代码之类的。 漏洞证明： 插入个表情，然后修改元素，插入xss，发送。 收到了 可以看对方系统，IE版本。 可以找相应的exp挂马。...

Scripts Genie Domain Trader Remote XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Scripts Genie Top Sites v2.11 <= Remote XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Netgear DGN1000B XSS / Command Injection

Device Name: DGN1000B Vendor: Netgear ============ Vulnerable Firmware Releases: ============ Firmwareversion: V1.1.00.24 Firmwareversion: V1.1.00.45 Download: http://downloadcenter.netgear.com/de/product/DGN1000 ============ Device Description: ============ The N150 Wireless ADSL2+ Modem Router...

MyBB Xbox Live ID Cross Site Scripting

Exploit Title: Xbox Live ID MyBB Plugin Stored XSS Date: 13/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.leveleando.com Software Link: http://mods.mybb.com/view/profile-xbox-live-id Version: 1.0 Category:Web Security Tested on: Linux...

ManageEngine MSPCentral 9 CSRF / Cross Site Scripting Vulnerability

ManageEngine MSPCentral version 9 suffers from cross site request forgery, insecure session cookies, and cross site scripting vulnerabilities. Multiple vulnerabilities in ManageEngine MSPCentral 9 ------------------------------------------------------------ Background ---------- At Kiwicon 6 in m...

Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities

Exploit for multiple platform in category web applications Oracle OpenSSO 8.0 Multiple XSS POST Injection Vulnerabilities alert1;' / alert2;' / input type="hidden" n...

SiNG CMS 2.9.0 Cross Site Scripting

SiNG cms 2.9.0 email Remote XSS POST Injection Vulnerability alert"XSS";' / in...

Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : thunderbird vulnerabilities (USN-1430-3)

USN-1430-1 fixed vulnerabilities in Firefox. This update provides the corresponding fixes for Thunderbird. Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety issues affecting...

Ubuntu 10.04 LTS / 11.04 / 11.10 : ubufox update (USN-1430-2)

USN-1430-1 fixed vulnerabilities in Firefox. This update provides an updated ubufox package for use with the latest Firefox. Bob Clary, Christian Holler, Brian Hackett, Bobby Holley, Gary Kwong, Hilary Hall, Honza Bambas, Jesse Ruderman, Julian Seward, and Olli Pettay discovered memory safety...

Forbes.com Vulnerable to XSS injection

Forbes.com Vulnerable to XSS injection One of the Leading News Company Forbes is Vulnerable. Hacker with name "B1uB3rry" expose that Forbes.com is vulnerable to possible SQL injection but confirmed to be vulnerable to Cross Site Script Injection XSS & HTML Injection. According to hacker "One can...

CVE-2011-1841

Cross-site scripting XSS vulnerability in the linkto helper in Mojolicious before 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

OpenEMR v3.2.0 SQL Injection and XSS

Exploit for php platform in category web applications Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management,...