CVE-2017-8835

SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2380hw6580hw2710hw31350hw22500-7.0.1-build2093. An attack vector is the bauth cookie to cgi-bin/MANGA/admin.cgi. One impact is enumeration of user accounts by observing whether a sessi...

Cross-site scripting and cross-site request forgery vulnerabilities in metinfo

metinfo cms is an enterprise website management system with PHP Mysql architecture. There are cross-site scripting and cross-site request forgery vulnerabilities in metinfo. metinfocms "background settings-basic information-third-party code" form does not have token validation and effective...

Stored XSS Vulnerability in OurPHP

OurPHP is a web content management system developed using the PHP language. A stored XSS vulnerability exists in OurPHP version V1.7.1, which can be exploited to insert cross-site code in the member center and obtain sensitive information from the administrator cookie...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

Cross site scripting

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin’s cookie and other information by crafting a new entry as an editor user. The root cause is related to the absence of the serendipity_event_xsstrust plugin and a set_config error in that plugin. No explicit remediation is pro...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post)

miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spyka.net/scripts/php/miniblog Software link :...

miniblog 1.0.1 Cross Site Request Forgery

Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spyka.net/scripts/php/miniblog Software link : http://dl.spyka.co.uk/scripts/php/miniblog-1-0-1.zip Description admin...

Fortinet FortiWAN Information Disclosure Vulnerability

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by executing a GET request on the /linkreport/tmp/adminglobal page to obtain an administrator login cookie...

Multiple Blue Coat Systems SSL Visibility Appliance Product Information Disclosure Vulnerabilities

Blue Coat Systems SSL Visibility Appliance SV800 and others are SSL visibility appliances from Blue Coat Systems, USA, which are at the heart of encrypted traffic management, providing visibility into SSL traffic and supporting the addition of SSL inspection capabilities to advanced threat...

Multiple Blue Coat Systems SSL Visibility Appliance Product Sensitive Information Vulnerabilities

Blue Coat Systems SSL Visibility Appliance SV800 and others are SSL visibility appliances from Blue Coat Systems, USA, which are at the heart of encrypted traffic management, providing visibility into SSL traffic and supporting the addition of SSL inspection capabilities to advanced threat...

嘉缘人才系统存储型xss

简要描述： rt 详细说明： 首先注册一个用户，然后新建一份简历。在简历的添加教育背景处插入xss payload 然后保存这份简历。 可以看到插入的数据 数据没有编码直接进入数据库了。 然后查看简历直接触发 在后台简历管理，也可触发。偷取管理员cookie。 漏洞证明： img src="https://images.seebug.org/upload/201502/22235042cdc7d743d84b93343ef1a5d9f476c06a.jpg" alt="4...

SMF 2.0.4 PHP Code Injection

'.$page; curlclose$ch; // to close 'logged-in' part ?...

Claroline CMS Stored Cross Site Scripting

HUT CNIS Exploit Title: Claroline CMS stored XSS Vulnerability Date: 2011/10/19 Author: S.Azadi Google Dork: intext:Powered by Claroline 2001 - 2009 Vulnerability Type: Stored XSS Version: Claroline © 2001 – 2009 --------------------------------------------------------------------- Technical...

TextAds 2.08 Cross Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

TextAds 2.08 Script - Cross-Site Scripting

TextAds 2.08 Script - Cross-Site Scripting =========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting...

TextAds 2.08 Script - Cross-Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

ASPMass Shopping Cart Vulnerability File Upload CSRF

Exploit for asp platform in category web applications ==================================================== ASPMass Shopping Cart Vulnerability File Upload CSRF ==================================================== Title : ASPMass Shopping Cart Vulnerability File Upload CSRF Affected Version :...