KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting

KnowledgeTree 3.5.2 Community Edition - Persistent Cross-Site Scripting Exploit Title: KnowledgeTree 3.5.2 Community Edition Permanent XSS Vulnerability Date: 2010-08-11 Author: @fdiskyou e-mail: rui at deniable.org Software Link: http://www.knowledgetree.com/products/community/download Version:...

PHP Live 3.3 Remote SQL Injection Exploit

Exploit for php platform in category web applications ========================================= PHP Live 3.3 Remote SQL Injection Exploit ========================================= !/usr/bin/perl -w Exploit Title: PHP Live 3.3 Date: 01/08/2010 Author: TA4G - email protected Vendor:...

Oracle Secure Backup Administration objectname Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Oracle Secure Backup. Authentication is required to exploit this vulnerability. The specific flaw exists in the handling of variables to the propertybox.php script located on the Oracle Secure...

Internet Explorer File Download Dialog Box Manipulation (MS05-054; CVE-2005-2829)

Microsoft Internet Explorer IE is a web browser application capable of downloading and displaying various Internet resources. With IE, a user can download files from network servers using various protocols such as HTTP and FTP. IE can parse and display HTML pages and image files by itself. For...

Science Fair In A Box SQL Injection / Cross Site Scripting

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members Science Fair In...

Science Fair In A Box - SQL Injection Cross-Site Scripting

Science Fair In A Box - SQL Injection Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Science Fair In A Box SQLi & XSS Vulnerability Version:2.0.6 Price:Free Vendor url:http://www.sfiab.ca/ Published: 2010-06-09 Greetz to:Sid3^effects, MaYur, M4n0j, Dark...

CMScout (XSS/HTML Injection) Multiple Vulnerabilities

Exploit for php platform in category web applications ===================================================== CMScout XSS/HTML Injection Multiple Vulnerabilities ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

CMScout Cross Site Scripting

======================================================================= CMScout XSS/HTML Injection Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

Adobe Releases Guidance for Launch Functionality Mitigation in Acrobat and Reader

Adobe has released a blog entry addressing a vulnerability in Acrobat and Reader. This vulnerability exists due to the way in which Adobe Acrobat and Adobe Reader handle launch actions embedded in PDFs. When users open a PDF that contains a launch action, they are presented with a dialog box...

Joomla Juke Box 1.7 Local File Inclusion

============================================================================================================= o Joomla Component Juke Box Local File Inclusion Vulnerability Software : comjukebox version 1.7 Vendor : http://www.jooforge.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY Paman zxvf s4v...

Joomla! Component Juke Box 1.7 - Local File Inclusion

============================================================================================================= o Joomla Component Juke Box Local File Inclusion Vulnerability Software : comjukebox version 1.7 Vendor : http://www.jooforge.com/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY Paman zxvf s4v...

Joomla! Component Juke Box 1.7 - Local File Inclusion

Joomla! Component Juke Box 1.7 - Local File Inclusion ============================================================================================================= o Joomla Component Juke Box Local File Inclusion Vulnerability Software : comjukebox version 1.7 Vendor : http://www.jooforge.com/...

Practical Web Security testing of HTTP truncated smuggling vulnerability-vulnerability warning-the black bar safety net

In this article, we will detailed to introduce the reader for the HTTP truncated and HTTP smuggling attack security testing techniques. We will by example demonstrate how to use the HTTP Protocol, certain properties, or the use of Web application weaknesses, or different proxy for HTTP message of...

Leaftec CMS SQL Injection / Cross Site Scripting

Exploit Title: leaftec cms multiple vulnerabilities Date: 21.03.2010 Author: Valentin Höbel Version: Tested on: Debian etch CVE : Code : :: General information :: leaftec cms multiple vulnerabilities discovered :: by Valentin Höbel :: [email protected] :: Product information :: Name = leafte...

leaftec CMS - Multiple Vulnerabilities

Exploit Title: leaftec cms multiple vulnerabilities Date: 21.03.2010 Author: Valentin Höbel Version: Tested on: Debian etch CVE : Code : :: General information :: leaftec cms multiple vulnerabilities discovered :: by Valentin Höbel :: [email protected] :: Product information :: Name = leafte...

vBulletin Blog 4.0.2 - Title Cross-Site Scripting

vBulletin Blog 4.0.2 - Title Cross-Site Scripting Vbulletin Blog 4.0.2 XSS Vulnerability Author: FormatXformat Version: Vbulletin 4.0.2 Dork: Powered by vBulletin™ Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved. The script is affected by Permanent XSS vulnerability, ...

Cross site scripting

Cross-site scripting XSS vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter aka the Comment Box in a noentryid action. NOTE: some of these details are obtained from third party information...

CVE-2010-1048

Cross-site scripting XSS vulnerability in blog/index.php in Uiga Business Portal allows remote attackers to inject arbitrary web script or HTML via the textcomment parameter aka the Comment Box in a noentryid action. NOTE: some of these details are obtained from third party information...

Mozilla Firefox and SeaMonkey Download Filename Spoofing Vulnerability

CVE:CVE-2009-3376 Mozilla Firefox and SeaMonkey are prone to a spoofing vulnerability. Attackers can exploit this issue to spoof the filenames displayed in the download dialog box and trick a user into downloading executable files. NOTE: This issue was previously covered in BID 36843 Mozilla...

Fingerprint recognition technology to crack-vulnerability warning-the black bar safety net

Some time ago enrolled in driver training, the results found a crack for fingerprint recognition. Now what all speak of high-tech driver training is certainly no exception, in training on the use of fingerprint attendance machine to record the students on the car of time, reach the predetermined...