EUVD-2006-1420

Malware in sbrugna...

Absolute FAQ Manager 6.0 - Insecure Cookie Handling

Absolute FAQ Manager 6.0 - Insecure Cookie Handling Discovered by : Hakxer Script : Absolute FAQ Manager http://www.xigla.com/absolutefmnet/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie="xlaAFMDEMOadmin=userid=1&lvl=1&s="...

Absolute FAQ Manager 6.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =============================================================== Absolute FAQ Manager 6.0 Insecure Cookie Handling Vulnerability =============================================================== Discovered by : Hakxer Script : Absolute FAQ...

Absolute FAQ Manager 6.0 - Insecure Cookie Handling

Discovered by : Hakxer Script : Absolute FAQ Manager http://www.xigla.com/absolutefmnet/demo.htm Greetz : Allah , All My friend ,www.educ-up.com ------------------------------- Poc : javascript:document.cookie="xlaAFMDEMOadmin=userid=1&lvl=1&s="; Exploit Go To admin login :...

Cross site scripting

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416

Cross-site scripting XSS vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter...

CVE-2006-1416

CVE-2006-1416 describes a cross-site scripting (XSS) vulnerability in the afmsearch.aspx page of Absolute FAQ Manager for .NET 4.0 and earlier. The issue arises from unsanitized input in the search module parameters (possibly the question parameter), enabling a remote attacker to inject arbitrary...

Absolute FAQ Manager .NET XSS vuln.

Absolute FAQ Manager .NET XSS vuln. Vuln. discovered by : r0t Date: 25 march 2006 vendor: http://www.xigla.com/absolutefmnet/ affected versions: Version 4.0 and prior orginal advisory: http://pridels.blogspot.com/2006/03/absolute-faq-manager-net-xss-vuln.html Vuln. Description: Absolute FAQ Manag...