PT-2017-18531

Name of the Vulnerable Software and Affected Versions Accellion FTA versions prior to FTA 9 12 180 Description An issue was discovered that allows for a CRLF attack vector through the auth params in the "home/seos/courier/login.html" endpoint. Recommendations For versions prior to FTA 9 12 180,...

PT-2017-18535

Name of the Vulnerable Software and Affected Versions Accellion FTA versions prior to FTA 9 12 180 Description An issue was discovered in Accellion FTA devices, where there is a cross-site scripting XSS vulnerability in the "home/seos/courier/smtpg add.html" endpoint with the param parameter...

PT-2017-18532

Name of the Vulnerable Software and Affected Versions Accellion FTA versions prior to FTA 9 12 180 Description An issue was discovered in Accellion FTA devices. There is a cross-site scripting XSS issue in the "home/seos/courier/user add.html" endpoint with the param parameter. Recommendations Fo...

CVE-2017-8791: Improper Neutralization of CRLF Sequences

An issue was discovered on Accellion FTA devices before FTA912180. There is a home/seos/courier/login.html authparams CRLF attack vector...

CVE-2017-8794: Server-Side Request Forgery (SSRF)

An issue was discovered on Accellion FTA devices before FTA912180. Because a regular expression intended to match local https URLs lacks an initial ^ character, courier/web/1000@/wmProgressval.html allows SSRF attacks with a file:///etc/passwdhttps:// URL pattern...

PT-2017-18510

Name of the Vulnerable Software and Affected Versions Accellion FTA versions prior to FTA 9 12 180 Description An issue was discovered that allows for cross-site scripting XSS in the courier/1000@/index.html endpoint with the auth params parameter. The device attempts to mitigate specific XSS...

creditoncouriernewspaper.co.uk XSS vulnerability

Vulnerable URL: http://www.creditoncouriernewspaper.co.uk/search.cfm?sectionIs=search=Local News=2011="--!"= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4058728 VIP website...

Courier Tracking Software 6.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Courier Tracking Software v6.0 - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/courier-tracking-software-ver-6 Demo:...

Courier Tracking Software 6.0 - SQL Injection

Courier Tracking Software 6.0 - SQL Injection Exploit Title: Courier Tracking Software v6.0 - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/courier-tracking-software-ver-6 Demo:...

Courier Tracking Software 6.0 SQL Injection

Exploit Title: Courier Tracking Software v6.0 - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/courier-tracking-software-ver-6 Demo: http://courierv6.couriersoftwares.com/ Version: 6.0 Tested on: Win7 x64, Kali Lin...

Courier Tracking Software 6.0 - SQL Injection

Exploit Title: Courier Tracking Software v6.0 - SQL Injection Google Dork: N/A Date: 26.03.2017 Vendor Homepage: http://eagletechnosys.com/ Software: http://www.eaglescripts.com/courier-tracking-software-ver-6 Demo: http://courierv6.couriersoftwares.com/ Version: 6.0 Tested on: Win7 x64, Kali Lin...

courier-tribune.com XSS vulnerability

Open Bug Bounty ID: OBB-209557 Description| Value ---|--- Affected Website:| courier-tribune.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

Courier Management System Cross Site Scripting / SQL Injection

Title : Courier Management System - Sql Injection and non-persistent XSS login portal Date: 17 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: http://couriermanageme.sourceforge.net/ Version: not supplied Download Software:...

Courier Management System - SQL Injection

Courier Management System - SQL Injection Title : Courier Management System - Sql Injection and non-persistent XSS login portal Date: 17 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: http://couriermanageme.sourceforge.net/ Version: not supplied...

Courier Management System - SQL Injection

Title : Courier Management System - Sql Injection and non-persistent XSS login portal Date: 17 January 2017 Exploit Author: Sibusiso Sishi [email protected] Tested on: Windows7 x32 Vendor: http://couriermanageme.sourceforge.net/ Version: not supplied Download Software:...

Courier Business Website Script - Authentication Bypass

Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Courier Business Website Script Script Buy Now: http://scriptfirm.com/courier-business-website Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

PT-2016-5128

Name of the Vulnerable Software and Affected Versions Accellion File Transfer Appliance FTA versions prior to FTA 9 12 40 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the client id parameter in the "home/seos/courier/security key2.api"...

Courier Mail Server Memory Corruption Vulnerability

Courier Mail Server is a mail transfer proxy server that provides ESMTP, IMAP, POP3, SMAP, webmail and mailing list services. A memory corruption vulnerability exists in Courier Mail Server, which allows remote attackers to exploit the vulnerability to submit a special request that could crash th...

Threat Outbreak Alert RuleID15252: Email Messages Distributing Malicious Software on May 12, 2015

Medium Alert ID: 38802 First Published: 2015 May 13 13:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15252 may contain the following files: Name | Size...

A number of courier company website was traced to memory vulnerability hack 2 0 seconds to crack the database-vulnerability warning-the black bar safety net

“The birth of a child, to buy milk SMS; bought a house, the decoration of SMS is endless; buy a new car, the insurance company of the SMS is overwhelming.” Yesterday, CCTV exposure together with violations of the privacy of others the information security of the case, adding that these spam...