45 matches found
DanPHPSupport 0.5 - 'admin.php?do' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20203/info DanPHPSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...
Fastream NETFile Web Server 7.1.2 - 'HEAD' Denial of Service
Fastream NETFile FTP/Web Server 7.1.2 Professional DoS Exploit Bug found by bratax ck Coded bY karak0rsan d0gma.org // unuver.com Greetz:hurby,phalaposher,l4m3r,Atak,spymaster,razor... $host=$ARGV0; $port=$ARGV1; if!$ARGV1 print "Fastream FTP/Web Server DoS\n"; print "Coded by karak0rsan //...
phpGroupWare 0.9.x - index.php HTML Injection
phpGroupWare 0.9.x - index.php HTML Injection source: https://www.securityfocus.com/bid/12082/info PhpGroupWare is reported to be susceptible to a HTML injection vulnerability. This issue exists because the application fails to properly sanitize user-supplied input. The attacker-supplied HTML and...
Captaris (Infinite) WebMail XSS
I figured it was about time I hopped on the XSS band-wagon. Captaris www.captaris.com Infinite WebMail application is vulnerable to Cross-Site Scripting XSS attacks. The application fails to filter the following tags that can both be used to redirect a user to an attack script: Launch on e-mail...
