CVE-2014-7700

The Flying Fox aka com.chillingo.slyfoxfree.android.aja application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8195

Name of the Vulnerable Software and Affected Versions The Flying Fox aka com.chillingo.slyfoxfree.android.aja version 1.0.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify...

CVE-2014-7700: Undefined Security Weakness

The Flying Fox aka com.chillingo.slyfoxfree.android.aja application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-3846

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

CVE-2014-3846

CVE-2014-3846 describes a cross-site scripting (XSS) vulnerability in Flying Cart where remote attackers can inject arbitrary web script or HTML via the p parameter to index.php. The affected element is the web-facing application logic handling p in index.php, enabling potential script execution ...

CVE-2014-3846

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

PT-2014-5548

Name of the Vulnerable Software and Affected Versions Flying Cart affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the p parameter to "index.php" API endpoint. Recommendations At the moment, there is no...

CVE-2014-3846: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php...

Flying Cart Cross Site Scripting

Cross Site Scripting on Online Store Flying Cart Risk: Low CWE number: CWE-79 Date: 19/05/2014 Vendor: Flying Cart Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?p=xss PoC: -Target:...

Flying Forum personal space XSS vulnerability-vulnerability warning-the black bar safety net

Article author: knowledge seekers Version: ftbbs v7. 1static installation versionseems to be the latest Vulnerable page: usercenter. asp The vulnerability occurs in the blogmid filter is not strict lead to blogmid=Checkstrrequest. form"blogmid" if blogmid"" then sql="update "&ft&"clubuser set...

Ftbbs 6. X injection 0day exp-vulnerability warning-the black bar safety net

Article author: the cloud EagleJ. L. S. T Information source: security leaves the technical groupJ. Leaves Security Team （http://www.00day.cn to See 1 0 The Big Brother of the message scared me, put something out, don't know a wooden man to, wood technology, only grasping the point of the broiler...

Airkiosk/formlib application is XSS vuln

In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...

RamaCMS-adodb.txt

===================================================================== RamaCMS adodb.inc.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download Scrip...

MNews <= 2.0 (noticias.php) Remote File Inclue Vulnerability

===================================================================== MNews = 2.0 noticias.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download...