Tapatalk for WoltLab Burning Board 'welcome.php' Has Multiple Cross-Site Scripting Vulnerabilities

WoltLab Burning Board is a forum program and Tapatalk is a plug-in application. Tapatalk for WoltLab Burning Board 'welcome.php' has a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to...

Croogo CMS Cross-Site Scripting Vulnerability

Croogo CMS is a content management system. Croogo CMS suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive cookies, hijack sessions, or perform malicious...

WordPress plugin Pods cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Pods. As the program fails to properly filter user-suppli...

PHPKIT WCMS 'include.php' cross-site scripting vulnerability

PHPKIT WCMS is a web-based content management system CMS. The system provides modules such as forums and message boards. A cross-site scripting vulnerability exists in PHPKIT WCMS, which stems from the program failing to adequately filter user-submitted input. When a user browses the affected sit...

Multiple Input Validation Vulnerabilities in TYPO3 Content Rating Extbase Extension

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. Multiple input validation vulnerabilities exist in the TYPO3 Content Rating Extbase Extension, which can be exploited by attackers to steal cookie-based authentication credential...

ZfcUser 'redirect' parameter cross-site scripting vulnerability

ZfcUser is a user registration and authentication module for Zend Framework 2. A cross-site scripting vulnerability exists in ZfcUser's handling of the 'redirect' parameter, which can be exploited by a remote attacker to construct a malicious URI and trick the user into parsing it, which can be...

FlexPaper 'FlexPaperViewer.swf' Cross-Site Scripting Vulnerability

FlexPaper is an open source lightweight in the browser to display a variety of documents on the component . A cross-site scripting vulnerability exists in FlexPaper 'FlexPaperViewer.swf' due to the program failing to properly filter user-supplied input. An attacker can exploit this vulnerability ...

FlexPaper 'FlexPaperViewer.swf' 'Content Spoofing Vulnerability

FlexPaper is an open source lightweight in the browser to display a variety of documents on the component . A content spoofing vulnerability exists in FlexPaper 'FlexPaperViewer.swf' due to the program failing to properly filter user-supplied input. An attacker can exploit this vulnerability to...

Sefrengo CMS 'main.php' Cross-Site Scripting Vulnerability

Sefrengo CMS is an open source content management system. A cross-site scripting vulnerability exists in Sefrengo CMS 'main.php' due to the application failing to properly filter user-supplied input. This allows an attacker to steal cookie-based credentials, compromise the application, and access...

Ex Libris Patron Directory Services Cross-Site Scripting Vulnerability

Ex Libris is a global provider of library automation technology. A cross-site scripting vulnerability exists in Ex Libris Patron Directory Services due to the program failing to properly filter user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code or...

Altitude uAgent - Altitude uCI 7.5 XSS

Altitude uAgent - Altitude uCI 7.5 Persistent XSS Details ======================================================================================== Product: Altitude uAgent - Altitude uCI 7.5 Security-Risk: High Vendor-URL: http://www.altitude.com CVE-ID:CVE-2014-9212 Credits...

Yourls 1.7 Cross Site Scripting

Hello, I found a xss stored vulnerability in Yourls 1.7 script latest version. The attacker can steal the admin's cookies and login in the admin panel. Note: Only the admin can see this. Steps to perform the vulnerability: 1. Create a new url to shorten -- In the inputs you need write this payloa...

Amazon Linux AMI : nginx (ALAS-2014-421)

A virtual host confusion issue was found in nginx, allowing HTTPS connections for one origin to be redirected to the virtual host of a different origin. This leads to a variety of issues, such as cookie theft and session hijacking. It could be triggered from a cross-site scripting flaw, tricking ...

Medium: nginx

Issue Overview: A virtual host confusion issue was found in nginx, allowing HTTPS connections for one origin to be redirected to the virtual host of a different origin. This leads to a variety of issues, such as cookie theft and session hijacking. It could be triggered from a cross-site scripting...

easytalk存储型XSS

简要描述： easytalk对用户提交数据过滤不严导致存储型跨站，利用该漏洞，攻击者可以盗取用户cookie或者进行其它攻击。 详细说明： 1、涉及版本EasyTalk x2.5 2、EasyTalk开源微博系统对投票模块的投票说明字段设置不严谨，导致存储型FLASH跨站，由于FLASH可以执行javascript脚本，利用此漏洞，攻击者可以加载本地脚本，盗取用户cookie以及其它信息。 漏洞证明： 1、登录系统，进入工具--》投票广场--》发起投票，发起投票时，添加投票说明，在说明字段选择添加flash...

ThinkSAAS 2.2 存储型XSS

简要描述： 挖最后一个。。。然后干活去了。。。这个绕过和之前几个都不一样，各浏览器通用、无触发条件、可盗取cookie并getshell、绕过全局防过滤函数，非重复漏洞。 详细说明： 既然挖thinksaas，那么就看看他的富文本XSS究竟过滤好了没。 可惜还是让我失望了。不过也不是厂商的错，毕竟这东西确实很难做的完美。我会在漏洞修复处给一个很好解决方案。 先看原理吧。 function cleanJs$text $text = trim $text ; //$text = stripslashes $text ; // 完全过滤注释 $text = @pregreplace '//',...

Barracuda Firewall 'cert_error' Parameter Cross-Site Scripting Vulnerability

Barracuda Firewall is a firewall distributed by Barracuda Networks Ltd. A cross-site scripting vulnerability exists in the Barracuda Firewall 'certerror' parameter due to a failure to properly filter user-supplied input. An attacker may be able to exploit this issue to execute arbitrary script co...

SonicWALL GMS 7.2 Build 7221.1701 Cross Site Scripting

I. VULNERABILITY ------------------------- Reflected XSS vulnerabilities in DELL SonicWALL GMS 7.2 Build: 7221.1701 II. BACKGROUND ------------------------- Dell® SonicWALL® provides intelligent network security and data protection solutions that enable customers and partners to dynamically secur...

Maccms V8 储存型xss（绕过360防护）

简要描述： rt 详细说明： 自带的360防护脚本对于xss过滤太弱， 留言处没有 对html代码进行实体转义，造成xss。 如，提交 "onerror="eval'\141\154\145\162\164\50\61\51'" 后台查看留言即可触发 加载远程js可偷cookie 漏洞证明：...

Symbiose Webos Cross Site Scripting / Path Disclosure

Exploit Title: Symbiose Webos - XSS / FPD Date: 04 July 2014 Exploit Author: G4eL Download: http://symbiose.fr.cr/ Demo: http://webos.symbiose.fr.cr/ Tested on: Ubuntu http://domain/usr/?path=/usr/&type=1alert123 Results : Fatal error: Class 'lib\ctrl\rawDataCall\1alert123Controller' not found in...