428 matches found
Kartris 1.6 Arbitrary File Upload
Exploit Title: Kartris 1.6 - Arbitrary File Upload Dork: N/A Date: 2020-05-08 Exploit Author: Nhat Ha - Sun CSR Vendor Homepage: https://www.cactusoft.com/ Software Link: https://www.kartris.com/ Version: 1.6 Category: Webapps Tested on: WiN10x64/KaLiLinuXx64 CVE: N/A POC:...
Scientific Linux Security Update : httpd on SL7.x x86_64 (20200407)
httpd: modsessioncookie does not respect expiry time httpd: Out of bounds write in modauthnzldap when using too small Accept-Language values httpd: Out of bounds access after failure in reading the HTTP request C Tenable Network Security, Inc. The descriptive text is C Scientific Linux...
RHEL 7 : httpd (RHSA-2020:1121)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1121 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: modsessioncookie...
httpd: Out of bounds write in mod_authnz_ldap when using too small Accept-Language values
In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, modauthnzldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset...
Hospital Management System 4.0 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Hospital Management System 4.0 - Persistent Cross-Site Scripting Exploit Author: FULLSHADE Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/hospital-management-system-in-php/ Version: v4.0 Tested on...
phpLDAPadmin Local File Inclusion Vulnerability
phpLDAPadmin is a web-based LDAP client which is mainly used to manage LDAP servers. A local file inclusion vulnerability exists in the way the 'Accept-Language' HTTP header value is handled in versions of phpLDAPadmin prior to 0.9.8, which can be exploited by a remote attacker to cause a denial ...
DEBIAN-CVE-2011-4082
A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request...
PT-2019-6687
Name of the Vulnerable Software and Affected Versions phpLDAPadmin versions prior to 0.9.8 Description A local file inclusion flaw was found in the way phpLDAPadmin processed certain values of the Accept-Language HTTP header. A remote attacker could use this flaw to cause a denial of service via...
CVE-2011-4082: Uncontrolled Resource Consumption
A local file inclusion flaw was found in the way the phpLDAPadmin before 0.9.8 processed certain values of the "Accept-Language" HTTP header. A remote attacker could use this flaw to cause a denial of service via specially-crafted request...
The vulnerability of the AuthLDAPCharsetConfig component in the Apache HTTP Server allows a attacker to cause a service failure.
The vulnerability of the AuthLDAPCharsetConfig component in the Apache HTTP Server is related to writing beyond the buffer memory limit. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially crafted Accept-Language header...
CVE-2007-5712
The internationalization i18n framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USEI18N option and the i18n component are enabled, allows remote attackers to cause a denial of service memory consumption via many HTTP requests with large...
CVE-2015-9416
The sitepress-multilingual-cms WPML plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header...
Design/Logic Flaw
The sitepress-multilingual-cms WPML plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header...
CVE-2015-9416
The sitepress-multilingual-cms WPML plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header...
CVE-2015-9416
CVE-2015-9416 affects the WordPress WPML plugin (sitepress-multilingual-cms) versions 2.9.3–3.2.6. Affected component: WPML; root cause: cross-site scripting via the Accept-Language HTTP header. Impact: allows execution of client-side code in victims’ browsers (XSS). Notable sources corroborate X...
PT-2019-7375
Name of the Vulnerable Software and Affected Versions sitepress-multilingual-cms WPML plugin versions 2.9.3 through 3.2.6 Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the Accept-Language HTTP header. Recommendations For sitepress-multilingual-cms WPM...
CVE-2015-9416: Improper Neutralization of Input During Web Page Generation
The sitepress-multilingual-cms WPML plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header...
LiveZilla Server Cross-Site Scripting Vulnerability (CNVD-2019-21246)
LiveZilla is a free online customer service system, based on PHP architecture, can run on Linux hosts or windows hosts, mainly divided into the client, server and server side LiveZilla Server. LiveZilla Server 8.0.1.1 before the version of mobile/index.php there is a cross-site scripting...