Netscaler SD-WAN 9.1.2.26.561201 - Command Injection (Metasploit)

Exploit Title: Citix SD-WAN logout cookie preauth Remote Command Injection Vulnerablity Date: 02/20/2017 Exploit Author: xort @ Critical Start Vendor Homepage: www.citrix.com Software Link: https://www.citrix.com/downloads/cloudbridge/ Version: 9.1.2.26.561201 Tested on: 9.1.2.26.561201 OS...

phpMyAdmin CSS Injection Vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A CSS injection vulnerability exists in phpMyAdmin. The vulnerability can be exploited to inject CSS with the help of a specially crafted cookie parameter...

Xionghai CMS system cookie user parameters exist sql injection vulnerability

XIONGHAI CMS is developed by XIONGHAI can be widely used in personal blogs, personal websites, corporate websites, a set of integrated website management system. Applicable to personal blogs, personal websites, corporate websites and other various purposes, the front end of the computer, mobile t...

Stack Overflow Vulnerability in Lovecraft PPS ActiveX Plugin

Aiki PPS ActiveX plugin is a browser-based flash playback control. A stack overflow vulnerability exists in the strUID and strCookie parameters of the Lovecraft PPS ActiveX plugin. An attacker can exploit the vulnerability to remotely execute arbitrary code, and a failed exploit can result in a...

Skyrun TopSec Firewall cookie cid parameter command injection vulnerability

TopSec is a firewall appliance from Skyrunner. The /cgi/maincgi.cgi program in the WEB management interface of Tianrongxin firewall has a command injection vulnerability when handling the cid variable in the cookie passed from the client, which allows an attacker to execute arbitrary commands usi...

Authentication flaw

Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value...

CVE-2016-4503

Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value...

PT-2016-5986

Name of the Vulnerable Software and Affected Versions Moxa Device Server Web Console version 5232-N Description The issue allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a UserId value from a cookie parameter...

CVE-2016-4503: Improper Authentication

Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value...

Accellion FTA 'statecode' Cookie Arbitrary File Read

This module exploits a file disclosure vulnerability in the Accellion File Transfer appliance. This vulnerability is triggered when a user-provided 'statecode' cookie parameter is appended to a file path that is processed as a HTML template. By prepending this cookie with directory traversal...

Magnifica Webscripts Anima Gallery Directory Traversal Vulnerability

Magnifica Webscripts is a PHP image management system. Magnifica Webscripts Anima Gallery suffers from a directory traversal vulnerability due to the func.php function in the program failing to adequately filter the 'theme' and 'lang' cookie parameter, which allows remote attackers to obtain the...

Medium: python-pip

Issue Overview: A flaw was found in the way python-requests set the domain cookie parameter for certain HTTP responses. A remote attacker could use this flaw to modify a cookie to be sent to an arbitrary URL. Affected Packages: python-pip Issue Correction: Run yum update python-pip or yum update...

AnimaGallery 2.6 Local File Inclusion

Exploit Title: AnimaGallery 2.6 theme and lang cookie parameter Local File Include Vulnerability Date: 2015/06/07 Vendor Homepage: http://dg.no.sapo.pt/ Software Link:http://dg.no.sapo.pt/AnimaGallery2.6.zip Version: 2.6 Tested on: Centos 6.5,php 5.3.2,magicquotesgpc=off Category: webapps...

AnimaGallery 2.6 (theme and lang cookie parameter) Local File Include Vulnerability

Exploit Title: AnimaGallery 2.6 theme and lang cookie parameter Local File Include Vulnerability Date: 2015/06/07 Vendor Homepage: http://dg.no.sapo.pt/ Software Link:http://dg.no.sapo.pt/AnimaGallery2.6.zip Version: 2.6 Tested on: Centos 6.5,php 5.3.2,magicquotesgpc=off Category: webapps...

PT-2014-2246

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.5.26 and earlier Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the Mod cookie parameter to the "html/modules.php" endpoint...

ActualAnalyzer Lite <= 2.81 'ant' Cookie Parameter RCE Vulnerability

ActualAnalyzer Lite is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlphAdmin CMS 1.0.5_03 'aa_login' Cookie Parameter Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30333/info AlphAdmin CMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this vulnerability to gai...

eSyndiCat 1.6 'admin_lng' Cookie Parameter Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30332/info eSyndiCat is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this vulnerability to gain...

CVE-2014-2846: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance AVA with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ dot dot dot slash dot slash in the lang Cookie parameter, as...

CVE-2013-5094

CVE-2013-5094 is an XSS vulnerability in McAfee Vulnerability Manager 7.5, caused by unsafe handling in the index.exp script via the cert_cn cookie parameter. The vulnerability allows a remote attacker to inject and execute arbitrary script in a user’s browser. Public references note this as a cr...