Juniper Secure Access crossite scripting

Administration interface crossite scripting...

Absolute Shopping Cart Cross Site Scripting

Exploit Title: Absolute shopping cart remote Persistent XSS vulnerability Date: 15th july 2010 Author: D4rk357 Critical:meduim contact:d4rk357atyahoodotin Software Link:http://www.absoluteshoppingcartdemo.co.uk/ Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty, punter,eberly,prashant Shoutz ...

ZDI-10-118: Oracle Secure Backup Administration uname Authentication Bypass Vulnerability

ZDI-10-118: Oracle Secure Backup Administration uname Authentication Bypass Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-118 July 13, 2010 -- CVSS: 9.7, AV:N/AC:L/Au:N/C:C/I:C/A:P -- Affected Vendors: Oracle -- Affected Products: Oracle Secure Backup -- Vulnerability Details:...

JBoss Administration Console Default Credentials

The JBoss Administration Console installed on the remote host uses the default username and password. Knowing these, an attacker can gain administrative control of the affected application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid47714; scriptversion"1.11";...

CVE-2010-2385

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

CVE-2010-2385

Unspecified vulnerability in Oracle Sun Java System Web Proxy Server 4.0.13 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration Server...

Oracle Secure Backup Administration selector Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability but may be bypassed. The specific flaw exists in the handling of the 'selector0' variable to the script index.php...

Oracle Secure Backup Administration objectname Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability. The specific flaw exists in the handling of variables to the propertybox.php script located on the Oracle Secure...

Oracle Secure Backup Administration Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to inject arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability but may be bypassed. The specific flaw exists in the handling of the 'preauth' variable to the script index.php use...

Oracle Secure Backup Administration uname Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of user input to the uname variable of the login.php script running on th...

Oracle Secure Backup Administration $other Variable Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability. The specific flaw exists in the handling of variables to the propertybox.php script located on the Oracle Secure...

CVE-2010-2448

znc.cpp in ZNC before 0.092 allows remote authenticated users to cause a denial of service crash by requesting traffic statistics when there is an active unauthenticated connection, which triggers a NULL pointer dereference, as demonstrated using 1 a traffic link in the web administration pages o...

Elite CMS 1.01 - Multiple Cross-Site Scripting Cross-Site Request Forgery Vulnerabilities

Elite CMS 1.01 - Multiple Cross-Site Scripting Cross-Site Request Forgery Vulnerabilities Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d Date: Sat 10 Jul 2010 08:05:44 PM EEST Vendor: http://elitecms.net/ Download: http://elitecms.net/download.php?download=eliteCMS -= CSRF...

Elite CMS 1.01 - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d Date: Sat 10 Jul 2010 08:05:44 PM EEST Vendor: http://elitecms.net/ Download: http://elitecms.net/download.php?download=eliteCMS -= CSRF PoC 1 - Change Admin Password =- Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities - Chang...

Apache Tomcat User Enumeration

This module enumerates Apache Tomcat's usernames via malformed requests to jsecuritycheck, which can be found in the web administration package. It should work against Tomcat servers 4.1.0 - 4.1.39, 5.5.0 - 5.5.27, and 6.0.0 - 6.0.18. Newer versions no longer have the "admin" package by default...

IBM WebSphere Application Server (WAS) Cross-site Scripting Vulnerability

The host is running IBM WebSphere Application Server and is prone to Cross-site Scripting vulnerability. OpenVAS Vulnerability Test $Id: secpodibmwasxssvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ IBM WebSphere Application Server WAS Cross-site Scripting Vulnerability Authors: Antu Sanadi...

IBM WebSphere Application Server XSS Vulnerability (Jul 2010)

IBM WebSphere Application Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only. CPE =...

Solaris 10 (x86) : 124631-42 (deprecated)

SunOS 5.10x86: System Administration Appl. Date this patch was last updated by Sun : Jun/28/10 This plugin has been deprecated and either replaced with individual 124631 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Netartmedia Real Estate Portal SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Netartmedia Real Estate Portal SQL Injection Vulnerability ==========================================================...