59 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...
CVE-2012-4932
Multiple cross-site scripting XSS vulnerabilities in SimpleInvoices before stable-2012-1-CIS3000 allow remote attackers to inject arbitrary web script or HTML via 1 the having parameter in a manage action to index.php; 2 the Email field in an Add User action; 3 the Customer Name field in an Add...
SimpleInvoices 2011.1 Cross-Site-Scripting (XSS) Vulnerabilities CVE-2012-4932
Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...
SimpleInvoices 2011.1 Cross Site Scripting
Overview SimpleInvoices 2011.1 is vulnerable to Cross-site Scripting XSS. Software Description Simple Invoices is a free, open source, web based invoicing system that you can install on your server/pc or have hosted by one of our services providers. Vulnerability Overview The vulnerabilities POC...
(Post Form login var 'username') BLIND SQLi exploit--Open Biller 0.1-->
!/usr/bin/perl ------------------------------------------------------------------------ Post Form login var 'username' BLIND SQLi exploit--Open Biller 0.1-- ------------------------------------------------------------------------ CMS INFORMATION: --WEB: http://sourceforge.net/projects/geekbill/...
Sql injection
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-2036
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-2036
SQL injection vulnerability in index.php in Open Biller 0.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2009-2036
CVE-2009-2036 : The connected documents describe a SQL injection vulnerability in Open Biller 0.1, specifically in index.php, where the username parameter can be used by an attacker to execute arbitrary SQL commands. The issue is a remotely exploitable flaw with a CVSS-like impact indicating part...
Open Biller 0.1 Blind SQL Injection
!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://sourceforge.net/projects/geekbill/ | |--DOWNLOAD: http://sourc...
Open Biller 0.1 (username) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
Open Biller 0.1 - Username Blind SQL Injection
Open Biller 0.1 - Username Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
Open Biller 0.1 (username) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Open Biller 0.1 username Blind SQL Injection Exploit ====================================================== !/usr/bin/perl...
Open Biller 0.1 - 'Username' Blind SQL Injection
!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --------------------------------------------------------------------------------------------- ...
PHP Hosting Biller 1.0 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in...
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting
PHP Hosting Biller 1.0 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/24517/info Php Hosting Biller is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perfor...
phb10-xss.txt
Application: PHP HOSTING BILLER Web Site: http://www.jnshosts.com/phphostingbiller.php Versions: 1.0 Platform: linux, windows, freebsd, sun Bug: Cross site Scripting XSS Fix Available: No ------------------------------------------------------- 1 Introduction 2 Bug 3 The Code 4 Fix 5 About Serapis...
CVE-2007-3281
The CVE-2007-3281 entry describes a Cross-site Scripting (XSS) vulnerability in index.php of Php Hosting Biller 1.0, exploitable via PATH_INFO to inject arbitrary script/HTML. The connected documents confirm the vulnerability and its vector, but do not provide exploit details or a published patch...