59 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...
CVE-2012-4932
Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...
SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932
Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...
SimpleInvoices 2011.1 Cross Site Scripting
Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...
(Post Form login var 'username') BLIND SQLi exploit--Open Biller 0.1-->
!/usr/bin/perl ------------------------------------------------------------------------ Post Form login var 'username' BLIND SQLi exploit--Open Biller 0.1-- ------------------------------------------------------------------------ CMS INFORMATION: --WEB: http://sourceforge.net/projects/geekbill/...
CVE-2009-2036
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
Sql injection
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-2036
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-2036
CVE-2009-2036 : The connected documents describe a SQL injection vulnerability in Open Biller 0.1, specifically in index.php, where the username parameter can be used by an attacker to execute arbitrary SQL commands. The issue is a remotely exploitable flaw with a CVSS-like impact indicating part...
Open Biller 0.1 (username) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
Open Biller 0.1 Blind SQL Injection
!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://sourceforge.net/projects/geekbill/ | |--DOWNLOAD: http://sourc...
Open Biller 0.1 - Username Blind SQL Injection
Open Biller 0.1 - Username Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
Open Biller 0.1 (username) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Open Biller 0.1 username Blind SQL Injection Exploit ====================================================== !/usr/bin/perl...
Open Biller 0.1 - 'Username' Blind SQL Injection
!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --------------------------------------------------------------------------------------------- ...
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perfor...
PHP Hosting Biller 1.0 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in...
phb10-xss.txt
Application: PHP HOSTING BILLER Web Site: http://www.jnshosts.com/phphostingbiller.php Versions: 1.0 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4 Fix 5 About Serapis...
CVE-2007-3281
The CVE-2007-3281 entry describes a Cross-site Scripting (XSS) vulnerability in index.php of Php Hosting Biller 1.0, exploitable via PATH_INFO to inject arbitrary script/HTML. The connected documents confirm the vulnerability and its vector, but do not provide exploit details or a published patch...