Multiple Blue Coat Systems SSL Visibility Appliance Product Information Disclosure Vulnerabilities

Blue Coat Systems SSL Visibility Appliance SV800 and others are SSL visibility appliances from Blue Coat Systems, USA, which are at the heart of encrypted traffic management, providing visibility into SSL traffic and supporting the addition of SSL inspection capabilities to advanced threat...

嘉缘人才系统存储型xss

简要描述： rt 详细说明： 首先注册一个用户，然后新建一份简历。在简历的添加教育背景处插入xss payload 然后保存这份简历。 可以看到插入的数据 数据没有编码直接进入数据库了。 然后查看简历直接触发 在后台简历管理，也可触发。偷取管理员cookie。 漏洞证明： img src="https://images.seebug.org/upload/201502/22235042cdc7d743d84b93343ef1a5d9f476c06a.jpg" alt="4...

SMF 2.0.4 PHP Code Injection

'.$page; curlclose$ch; // to close 'logged-in' part ?...

Claroline CMS Stored Cross Site Scripting

HUT CNIS Exploit Title: Claroline CMS stored XSS Vulnerability Date: 2011/10/19 Author: S.Azadi Google Dork: intext:Powered by Claroline 2001 - 2009 Vulnerability Type: Stored XSS Version: Claroline © 2001 – 2009 --------------------------------------------------------------------- Technical...

TextAds 2.08 Cross Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

TextAds 2.08 Script - Cross-Site Scripting

TextAds 2.08 Script - Cross-Site Scripting =========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting...

TextAds 2.08 Script - Cross-Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

ASPMass Shopping Cart Vulnerability File Upload CSRF

Exploit for asp platform in category web applications ==================================================== ASPMass Shopping Cart Vulnerability File Upload CSRF ==================================================== Title : ASPMass Shopping Cart Vulnerability File Upload CSRF Affected Version :...

ASPMass Shopping Cart - Arbitrary File Upload Cross-Site Request Forgery

ASPMass Shopping Cart - Arbitrary File Upload Cross-Site Request Forgery ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec...

Hesk Help Desk 2.1 - Cross-Site Request Forgery

Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " / YES access to all features and categories NO you can limit features and categories Support Billing Advertising/l...

Hesk Help Desk 2.1 XSRF

Exploit for unknown platform in category web applications ======================= Hesk Help Desk 2.1 XSRF ======================= Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " /...

Hesk Help Desk 2.1 - Cross-Site Request Forgery

Hesk Help Desk 2.1 - Cross-Site Request Forgery Application Name : Help Desk Php Script Date : 11.01.2010 Vulnerable Type : XSRF Infection : Admin cookilerini Deitirilebilinir. author : The.Morpheus The.Morpheus " / YES access to all features and categories NO you can limit features and categorie...

Viscacha 0.8 Gold persistant XSS vulnerability

Exploit for unknown platform in category web applications ============================================== Viscacha 0.8 Gold persistant XSS vulnerability ============================================== Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/...

Almnzm (COOKIE: customer) Remote SQL Injection Vulnerability

No description provided by source. ? printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ ---Script Almnzm SQL INJECTION /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ ---"Powered by Almnzm" /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ ---admin cookie create |QQQQ/ By Qabandi \QQQQ| ---Add PhP Ext |QQQQ| |QQQQ|...

Almnzm SQL Injection

^/", $content, $out, PREGPATTERNORDER; return $out10; $packet ="GET ".$p."index.php?action=creatticket&step=2 HTTP/1.0\r\n"; $packet.="User-Agent: Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1\r\n"; $packet.="Pragma: no-cache\r\n"; $packet.="Cookie:...

[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

[DSECRG-09-008] JOnAS(4.10.3) - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-008 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=81 Application: JOnAS Java Open Application Server Versions Affected: JOnAS4.10.3 / Apache Tomcat 5.5.26 Vendor URL:...

CVE-2008-5784

V3 Chat - Profiles/Dating Script 3.0.2 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

PT-2008-6834 · V3 · V3 Chat

Name of the Vulnerable Software and Affected Versions: V3 Chat - Profiles/Dating Script version 3.0.2 Description: The issue allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1. Recommendations: For version 3.0.2, as a temporary...

phpAddEdit 1.3 Login Bypass

------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Set admin cookie so favorite form field will sho...