PT-2009-4025 · Microsoft · Internet Explorer +4

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 and 7 for Windows XP SP2 and SP3 Microsoft Internet Explorer versions 6 and 7 for Server 2003 SP2 Microsoft Internet Explorer version 7 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer version 7...

Lussumo Vanilla ajax/updatecheck.php模块跨站脚本漏洞

BUGTRAQ: 35114 Vanilla（香草）是一个开源的多语言、完全可扩展的论坛程序。 输入传递给“ RequestName ”参数中的Ajax / updatecheck.php是没有正确地过滤，然后返回给用户。这可以被用来执行任意HTML和脚本代码在用户的浏览器会在背景下，受影响网站。 Lussumo Vanilla 1.1.5\1.1.7 厂商补丁： Lussumo ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2009-1845

CVE-2009-1845 describes a cross-site scripting (XSS) vulnerability in Lussumo Vanilla specifically in ajax/updatecheck.php, affecting Vanilla 1.1.5 and 1.1.7. The underlying issue is that the RequestName parameter can be exploited to inject arbitrary web script or HTML. Connected sources (OpenVAS...

CVE-2009-1845

Cross-site scripting XSS vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter...

AJAX combined with URL forwarding vulnerability a cross-domain submit data-vulnerability warning-the black bar safety net

by emptiness prodigal heart Chrome browser, when using ajax, the url forwarding vulnerability with cross-domain submit data but can not read the returned data. IE6 with certain versions of Don't know what version at home and a cafe is successful, the user click“OK”after, but also can be a...

On html local permissions issue-vulnerability warning-the black bar safety net

Author: lcx Recently read two articles, an article is Google Chrome using ajax to read a local file vulnerability, and the other is the local implementation of ajax permissions issue, for this I have a little own idea, I think this is not security, it seems like these two articles is not present ...

Project Woodstock 404 Error Page UTF-7 Encoded XSS

The remote web server contains a web application built using Woodstock components, which are user interface components for the web- based on Java Server Faces and AJAX. Woodstock is part of Sun Glassfish Enterprise Server and can also be used with other Java web containers, such as JBoss, Tomcat,...

Sun Glassfish Woodstock Project 4.2 XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

SA-CONTRIB-2009-025 - Fivestar - Cross-site request forgery

The Fivestar module provides a voting widget for content and records votes using Ajax. The URL used by the javascript to register votes is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Fivestar 5.x-1.x prior to...

Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure

Invision Power Board IP.Board 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz:...

Google Chrome存在ajax读取本地文件漏洞

google的浏览器Chrome，Chrome浏览器是一款设计极简洁、技术先进的浏览器，它可以让您更快速、安全且轻松地使用网络。 存在ajax读取本地文件漏洞。 利用该漏洞可以读取本地文本文件，并提交出来。 http://www.inbreak.net/?action=show&id=151 Chrome1.0.154.53 暂无 http://www.inbreak.net/?action=show&id=151...

Google Chrome used ajax to read a local file vulnerability-vulnerability warning-the black bar safety net

Author: the emptiness of the prodigal son heart google's browser Chrome1. 0. 1 5 4. 5 3 currently the latest, and the presence of ajax to read a local file vulnerability. Using this vulnerability you can read a local text file and submit it. And Chrome the cookie is saved by default in...

MyioSoft Ajax Portal 'ajaxp_backend.php' SQL Injection Vulnerability

MyioSoft Ajax Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in th...

MyioSoft Ajax Portal 3.0 - page SQL Injection

MyioSoft Ajax Portal 3.0 - page SQL Injection AjaxPortal 3.0 ajaxpbackend.php page Remote SQL Injection Vulnerability Bug found && Exploited by cOndemned Greetz: ZaBeaTy, d2, Beowulf, str0ke, Alfons Luja, 0in and others Proof of Concept :...

MyioSoft Ajax Portal 3.0 (page) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== MyioSoft Ajax Portal 3.0 page SQL Injection Vulnerability =========================================================== AjaxPortal 3.0 ajaxpbackend.php page Remote SQL Injection...

Cpanel File Manager Cross Site Scripting

Cpanel File Manager XSS Vulnerability Synopsis ------------- Cpanel www.cpanel.net has two file manager application, standard and legacy one to manage files. Both of them are vulnerable to XSS attack. File name is presented unescaped so that an attacker can craft malicious file name to execute...

SA-CONTRIB-2009-010 Plus 1 - Cross-site request forgery

The Plus 1 module provides a voting widget for content that records votes using Ajax. The URL for voting is vulnerable to cross-site request forgeries CSRF making it possible for users to unknowingly vote for content. Versions affected Versions of Plus 1 prior to 6.x-2.6 Drupal core is not...

phpcms2008-0day ask/search_ajax.php注入漏洞

漏洞文件：ask/searchajax.php ?php require './include/common.inc.php'; requireonce MODROOT.'include/ask.class.php'; $ask = new ask; header'Content-type: text/html; charset=utf-8'; ifstrtolowerCHARSET != 'utf-8' $q = iconvCHARSET, 'utf-8', $q; if$q $where = " title LIKE '%$q%' AND status = 5"; else...

马克斯CMS2.0beta (maxcms)管理员认证绕过漏洞

maxcms后台有自动升级功能，ajax的那个注射被修补了，但是这个漏洞还是没有修补。在上一贴有同学问是否能绕过认证，答案是肯定的，但是前提是要知道后台目录地址 Sub checkPower dim loginValidate,rsObj : loginValidate = "maxcms2.0" err.clear on error resume next set rsObj=conn.db"select mrandom,mlevel from premanager where musername='"&rCookie"musername"&"'","execute"...

Max CMS2. 0beta (maxcms)administrator authentication bypass vulnerability-vulnerability warning-the black bar safety net

by flyh4t http://bbs.wolvez.org/ maxcms background have auto upgrade function, the ajax that the injection is patched, but the vulnerability still not patched. In the previous patch with classmates to see if they can bypass the authentication, the answer is Yes, but the premise is to know the...