WordPress statspressCN 1.9.0 Stored Cross Site Scripting

Exploit Title: Wordpress statspressCN search Keywords stored XSS Date: 21-1-2010 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/statpresscn.1.9.0.zip Version: wordpress3.0.4, StatsCN1.9.0 Tested on: Firefox 3.0.15, , IE 8 Info: This plugin shows you real time statisti...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the supid parameter in a suppliers details action...

EzineArticles.com Cross Site Scripting

SecWorm.net - Advisory http://SecWorm.net/ XSS Vulnerability in EzineArticles.com ---------------------------------------------------------------------------- ------ 1. Advisory Information: ---------------------------------------------------------------------------- ------ Title:- Cross Site...

Photokorn 1.542 RFI / XSS / phpinfo() Disclosure

======================================================================================== | Title : photokorn Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 3 | High : 2 | Medi...

Cross site scripting

Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...

Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection

Exploit for unknown platform in category web applications =================================================================== Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection =================================================================== Exploit: XSS & Html code injection ...

Micronet SP1910 Data Access Controller UI - Cross-Site Scripting HTML Code Injection

Micronet SP1910 Data Access Controller UI - Cross-Site Scripting HTML Code Injection Exploit: XSS & Html code injection in Micronet SP1910 data access controller UI Date: 27-11-2009 Author: K053 Vendor: http://www.micronet.info/modeldetail.aspx?seriesno=6&sno=472 Tested on : Private Networks...

Cross site scripting

The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...

Whois Server v2 XSS

Exploit for unknown platform in category web applications =================== Whois Server v2 XSS =================== Vuln in : "?query=" cuz when you Search about an domain in the script form you gonna find the typed text Clear ! no encryptiation! so we can use it as xss vuln :p here we got A li...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-6379)

The MozillaFirefox 3.0.12 release fixes various bugs and some critical security issues. MFSA 2009-34 / CVE-2009-2462 / CVE-2009-2463 / CVE-2009-2464 / CVE-2009-2465 / CVE-2009-2466: Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in...

X-Cart email subscription xss

Exploit for unknown platform in category web applications ============================= X-Cart email subscription xss ============================= X-Cart XSS in email subscription Download: http://www.x-cart.com/ Discovered by: Paulo Santos...

SuSE 11 Security Update : MozillaFirefox (SAT Patch Number 1134)

The Mozilla Firefox 3.0.12 release fixes various bugs and some critical security issues. - Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory...

Important: Red Hat Security Advisory: Red Hat Application Stack v2.4 security and enhancement update

Red Hat Application Stack v2.4 is now available. This update fixes several security issues and adds various enhancements. This update has been rated as having important security impact by the Red Hat Security Response Team. Red Hat Application Stack v2.4 is an integrated open source application...

Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ============================================================== Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability ============================================================== Xerver HTTP Server = v4.32 Remote Denial of Service Found...

Xerver HTTP Server 4.32 - Remote Denial of Service

Xerver HTTP Server 4.32 - Remote Denial of Service Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application...

Radvision's Scopia Cross Site Scripting Vulnerabilities

Radvision's Scopia Cross Site Scripting Vulnerabilities Author: Francesco Bianchino contact: f.bianchino at gmail dot com Product: Radvision's Scopia Version: 5.7 Vendor Site: http://www.radvision.com Product Support Page: http://www.radvision.com/Support/SCOPIA-57-Support/ Summary Radvision's...

Fedora Core 10 FEDORA-2009-8501 (viewvc)

The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8501. OpenVAS Vulnerability Test $Id: fcore20098501.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8501 viewvc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 11 FEDORA-2009-8507 (viewvc)

The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8507. OpenVAS Vulnerability Test $Id: fcore20098507.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8507 viewvc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-8501 (viewvc)

The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8501. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-8507 (viewvc)

The remote host is missing an update to viewvc announced via advisory FEDORA-2009-8507. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...