Apache Tiles Multiple XSS Vulnerability

This host has Apache Tiles installed and is prone to Cross-Site Script Vulnerability OpenVAS Vulnerability Test $Id: secpodapachetilesxssvuln.nasl 8695 2018-02-06 16:42:37Z cfischer $ Apache Tiles Multiple XSS Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 SecPod,...

SMA-DB 0.3.12 (RFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. -----------------:Remote File Include/cross site script:----------------- script:SMA-DB v0.3.12 ------------------------------------------------------------------ download from:http://bluevirus.ch/media/downloads/SMA-DBv0.3.12.zip...

SMA-DB 0.3.12 (RFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= SMA-DB 0.3.12 RFI/XSS Multiple Remote Vulnerabilities ======================================================= -----------------:Remote File Include/cross site script:-----------------...

PhpListPro Persistent XSS Vulnerability

-=--------------------ADVISORY-------------------=- phpListPro Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpListPro -=+ Version: 2.0.1 -=+ Vendor's URL: http://www.smartisoft.com/ -=+ Platform: WindowsLinuxUnix -=+ Bug type: Persistent...

Evenzia CMS XSS

Application: Evenzia CMS Vendors Url: http://www.evenzia.com Bug Type: Cross-Site Script Exploitation: Remote Introduction: Evenzia CMS is a web-based CMS system Google Dork: "Powered By eVenzia CMS" || "Developed By eVenzia" PoC:...

UebiMiau Multiple Input Validation Vulnerabilities

The remote host is running UebiMiau, a webmail application written in PHP. The version of UebiMiau installed on the remote host fails to sanitize user input to the 'selectedtheme' parameter of the 'error.php' script before using it as a template to generate dynamic HTML. An unauthenticated attack...

gmttmusic-xss.txt

-=--------------------ADVISORY-------------------=- GMTT Music Distro Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: GMTT Music Distro -=+ Version: 1.2 -=+ Vendor's URL: http://www.gmtt.co.uk/catalog/webstores -=+ Platform: Windows\Linux\Uni...

miniwebshop2-xss.txt

-=--------------------ADVISORY-------------------=- Mini Web Shop V.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mini Web Shop -=+ Version: 2 -=+ Vendor's URL: http://obiewebsite.sourceforge.net/o.php?MiniWebShop -=+ Platform:...

tyger-sqlxss.txt

-=--------------------ADVISORY-------------------=- Tyger Bug Tracking System Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Tyger Bug Tracking System -=+ Version: 1.1.3 -=+ Vendor's URL: http://uk.homeunix.org/tyger/cms/ -=+ Platform:...

Tyger Bug Tracking System Multiple Vulnerability

-=--------------------ADVISORY-------------------=- Tyger Bug Tracking System Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Tyger Bug Tracking System -=+ Version: 1.1.3 -=+ Vendor's URL: http://uk.homeunix.org/tyger/cms/ -=+ Platform:...

ccs-xss.txt

-=--------------------ADVISORY-------------------=- Call center 0,93 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Call senter -=+ Version: 0,93 -=+ Vendor's URL: http://www.call-center-software.org/ -=+ Platform: Windows\Linux\Unix -=+ Bug...

[Full-disclosure] Call Center Software - Remote Xss Post Exploit -

-=--------------------ADVISORY-------------------=- Call center 0,93 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Call senter -=+ Version: 0,93 -=+ Vendor's URL: http://www.call-center-software.org/ -=+ Platform: WindowsLinuxUnix -=+ Bug...

sabros17-xss.txt

-=--------------------ADVISORY-------------------=- sabros.us 1.7 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: sabros.us -=+ Version: 1.7 -=+ Vendor's URL: http://sourceforge.net/projects/sabrosus/ -=+ Platform: Windows\Linux\Unix -=+ Bug...

[x0n3-h4ck] myBloggie 2.1.5 XSS exploit

-=--------------------ADVISORY-------------------=- myBloggie 2.1.5 Author: CorryL [email protected] -=-------------------------------------------------------=- -=+ Application: myBloggie -=+ Version: 2.1.5 -=+ Vendor's URL: http://mywebland.com/download.php?id=19 -=+ Platform: WindowsLinuxUnix...

Mozilla Foundation Security Advisory 2006-72

Mozilla Foundation Security Advisory 2006-72 Title: XSS by setting img.src to javascript: URI Impact: High Announced: December 19, 2006 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.1 Firefox 1.5.0.9 Thunderbird 1.5.0.9 SeaMonkey 1.0.7 Description mozbugra4...

[x0n3-h4ck]Drake CMS v 0.2 XSS exploit

-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=-----------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: WindowsLinuxUnix -=+ Bug typ...

[Full-disclosure] [x0n3-h4ck.org] Bug on Drake CMS v0.2

-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=----------------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: WindowsLinuxUnix -=+ Bu...

YABBSE多个跨站脚本执行漏洞(CSS/XSS)

Yabb Se是一款基于PHP/MySQL的论坛程序。 YaBB SE由于不正确的过滤glow和shadow标记，远程攻击者可以利用这个漏洞进行跨站脚本执行攻击，导致敏感信息泄露。 在glow和shadow标记中加入恶意脚本代码，当浏览者读取包含此链接的页面，无需打开就会导致恶意脚本代码在用户浏览器上执行，可使目标用户敏感信息泄露。 YaBB Simple Machines SMF 1.0 b SE 1.5.1 Gold - SP 1.3 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： frog-m@n提供如下第三方补丁： 使用...

DEVWeb-1.5.txt

This is a multi-part message in MIME format. ------=NextPart00101C6F219.260F14A2 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable -=3D--------------------ADVISORY-------------------=3D- -=3D = =3D- -=3D DEV Web Manager System "alert775195196%= 3B ..::...

wwwthreads <= 5.4.2 croos site script vulnerbilities

PerSiaNFoX DigitaL SecuritY TeaM wwwthreads = 5.4.2 Cross Site Script Vulnerabilities Script...