187 matches found
New York Judge Rules FBI Can't Force Apple to Unlock iPhone
Apple - 1; The FBI - 0 Apple Won a major court victory against the Federal Bureau of Investigation FBI in an ongoing legal battle similar to San Bernardino. In a New York case, a federal magistrate judge has ruled in favor of Apple, rejecting the U.S. government’s request to force Apple to help...
Feng Office 1.7.4 - Cross Site Scripting Vulnerabilities
No description provided by source...
Feng Office 1.7.4 - Arbitrary File Upload
No description provided by source...
Feng Office 1.7.4 - XSS / Arbitrary File Upload Exploit
Exploit for php platform in category web applications Source: http://www.securityfocus.com/bid/47049/info alert0" / alert0" / --------------------------------------------- Feng Office 1.7.4 - Arbitrary File Upload --------------------------------------------- import socket host = 'localhost' path...
Feng Office 1.7.4 - Cross-Site Scripting
Feng Office 1.7.4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/47049/info alert0" / alert0" /...
Feng Office 1.7.4 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/47049/info alert0" / alert0" /...
Feng Office 1.7.4 - Arbitrary File Upload
import socket host = 'localhost' path = '/fengcommunity' shellpath = '/tmp' port = 80 def uploadshell: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connecthost, port s.settimeout8 s.send'POST ' + path + '/public/assets/javascript/ckeditor/ckuploadhandler.php HTTP/1.1\r\n' 'Host:...
Feng Office 1.7.4 - Arbitrary File Upload
Feng Office 1.7.4 - Arbitrary File Upload import socket host = 'localhost' path = '/fengcommunity' shellpath = '/tmp' port = 80 def uploadshell: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connecthost, port s.settimeout8 s.send'POST ' + path +...
Feng Office - Stored XSS
No description provided by source. Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management,...
CVE-2014-5343
Cross-site scripting XSS vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field...
CVE-2014-5343
CVE-2014-5343 is an XSS vulnerability reported in Feng Office, allowing remote attackers to inject arbitrary script/HTML via the client Name field. The NVD entry lists impacts as: confidentiality none, integrity partial, availability none, with a base score 4.3 (Medium). Connected documents corro...
CVE-2014-5343
Cross-site scripting XSS vulnerability in Feng Office allows remote attackers to inject arbitrary web script or HTML via a client Name field...
Feng Office Cross Site Scripting
Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management, Tasks, E-mails, Documents, Interna...
Feng Office - Persistent Cross-Site Scripting
Feng Office - Persistent Cross-Site Scripting Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document...
Feng Office - Persistent Cross-Site Scripting
Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management, Tasks, E-mails, Documents, Interna...
Feng 0.1.15 Multiple Remote Buffer Overflow and Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27049/info Feng is prone to multiple remote buffer-overflow and denial-of-service vulnerabilities. Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the server...
Feng Office 1.7.3.3 CSRF Vulnerability
No description provided by source. Vulnerability ID: HTB22910 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinfengoffice.html Product: Feng Office Vendor: Secure Data SRL http://www.fengoffice.com/ Vulnerable Version: 1.7.3.3 and probably prior versions Vendor Notification: 17 March 2011...
Feng Office ref_XXX XSS Vulnerability
Feng Office is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2013-5744
Cross-site scripting XSS vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary refXXX parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Feng Office 2.3.2-rc and earlier allows remote attackers to inject arbitrary web script or HTML via an arbitrary refXXX parameter...