5049 matches found
MGB - Multiple Cross-Site Scripting / SQL Injections
source: https://www.securityfocus.com/bid/54348/info MGB is prone to multiple cross-site scripting vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication...
phpmoneybooks 1.03 - Persistent Cross-Site Scripting
phpmoneybooks 1.03 - Persistent Cross-Site Scripting Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link:...
CVE-2012-2671
The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie and other sensitive headers, which allows attackers to obtain sensitive cookie information, hijack web sessions, or have other unspecified impact by accessing the cache...
NetArt Media Jobs Portal - SQL Injection
NetArt Media Jobs Portal - SQL Injection source: https://www.securityfocus.com/bid/54026/info NetArt Media Jobs Portal is prone to multiple HTML-injection vulnerabilities and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues...
Squiz CMS - Multiple Cross-Site Scripting / XML External Entity Injection Vulnerabilities
source: https://www.securityfocus.com/bid/54049/info Squiz CMS is prone to multiple cross-site scripting vulnerabilities and an XML external entity injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit these issues to execute arbitrary code in th...
Serious Tumblr Cross Site Scripting Vulnerability can be used to Spread Worms
Serious Tumblr Cross Site Scripting Vulnerability can be used to Spread Worms Two Indian Security Researchers Aditya Gupta @adi1391 and Subho Halder @sunnyrockzzs have found a serious Cross Site Scripting vulnerability in one of the most famous social networking websites Tumblr. This could be use...
Adiscon LogAnalyzer < 3.4.3 Multiple Vulnerabilities - Active Check
Adiscon LogAnalyzer is prone to multiple SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
phAlbum PHP Gallery Script Cross Site Scripting
Exploit Title: phAlbum php Gallery Script Reflected XSS Vulnerability Date: 2012 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr Issue: Reflected XSS Risk level: High Malicious users may inject JavaScript, VBScript, ActiveX, HTML or...
PHPhq.Net phAlbum 1.5.1 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/53648/info phAlbum is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...
ArtiPHP 5.5.0 Neo - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/53586/info Artiphp is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
WordPress 3.2.2 Stored Cross Site Scripting
Author : L3b-r1'z Tilte : Wordpress 0day Cross Site Scripting STORED Version 3.3.2 Date : 2012-May-04 Email : [email protected] Desc : This Exploit In Comment b0x , if you put alert1337 You will See The Alert : . Note : If Admin Active When You Make Comment Not Published Not Work Exploit :D . How ...
Websense Triton - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/51086/info Websense Triton is prone to a remote command-execution vulnerability. An attacker can exploit this issue to execute arbitrary commands with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of...
Croogo CMS 1.3.4 - Multiple HTML Injection Vulnerabilities
Croogo CMS 1.3.4 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/53287/info Croogo CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and scrip...
Bioly 1.3 - index.php Cross-Site Scripting SQL Injection
Bioly 1.3 - index.php Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/53018/info Bioly is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials,...
Prado TJavaScript::encode() script injection vulnerability
Prado TJavaScript::encode script injection vulnerability Vulnerability severity : medium Vulnerability type : cross-site script injection attack cookie theft session hijacking stealing of sensitive information Remotely exploitable : yes Vulnerability discovery date : 2012/03/07 Vulnerability...
WordPress (Optimal Internet) Xss Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
EZ Publish 4.x ezjscore Module - Cross-Site Scripting
EZ Publish 4.x ezjscore Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/52807/info eZ Publish is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
Dotclear 2.4.1.2 - adminauth.php?login_data Cross-Site Scripting
Dotclear 2.4.1.2 - adminauth.php?logindata Cross-Site Scripting source: https://www.securityfocus.com/bid/52221/info Dotclear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...
OSQAs CMS - Multiple HTML Injection Vulnerabilities
OSQAs CMS - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/52184/info OSQA's CMS is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context ...
CMS Wizard Cross Site Scripting
================================================================= -=CMS wizard Cross Site Scripting ================================================================= Author: XaDaL Date: 14-02-2012 vendor: http://www.cmswizard.co.uk/ tested on: windows mobile dork : powered by CMS wizard This...