909 matches found
WP Print Friendly 3.3.7 - wp-admin/options.php printfriendly_option custom_image Parameter XSS
The WP Print Friendly WordPress plugin was affected by a wp-admin/options.php printfriendlyoption customimage Parameter XSS security vulnerability...
User Friendly SVN 'login' Cross Site Scripting Vulnerability
User Friendly SVN is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mail Password Decryptor - All-in-one eMail Password Recovery Software
Mail Password Decryptor is the FREE software to instantly recover Mail Account passwords from popular email clients and other desktop applications. You can recover your lost password for email accounts like Gmail, Yahoo Mail, Hotmail or Windows Live Mail from email applications such as Microsoft...
CVE-2014-4719
Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...
Cross site scripting
Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2014-4719
User-Friendly SVN (USVN) is affected by an XSS in the login panel (svn/login/) prior to version 1.0.7, allowing an attacker to inject arbitrary script via the username field. The vulnerability is documented in CVE-2014-4719 with a base CVSS2 score of 4.3 (I=P). Affected component is the login han...
CVE-2014-4719
Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...
CVE-2014-4719
Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...
PT-2014-6072
Name of the Vulnerable Software and Affected Versions User-Friendly SVN versions prior to 1.0.7 Description The issue is related to a cross-site scripting XSS vulnerability in the login panel, specifically at the 'svn/login/' endpoint. This vulnerability allows remote attackers to inject arbitrar...
CVE-2014-4719: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the login panel svn/login/ in User-Friendly SVN aka USVN before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field...
phpBB Spider Friendly Module <= 1.3.10 File Include Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' | \\ | \\ | \ . . |\ \ \ /\ \ / /| || | | | | \ | \ Y / | || | | \ | \ \ / | || | |/ // / / ||| \ | / / \ / \ |\ /\ / / \ / \ | | | | / /\ \ / \ / \ | | | | / | / Y \ || / /| /| /...
Lyrics 3.0 - Engine SQL Injection Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99...
WD-CMS 3.0 - Multiple Vulnerabilities
No description provided by source. Exploit Title: WD-CMS 3.0 Multiple Vulnerabilities Date: December 31st, 2009 Author: Sora Software Link: http://www.webdiamond.net/cms.html Version: 3.0 Tested on: Windows Vista and Linux Backtrack 3 --------------------------------------------------------------...
RuubikCMS 1.1.1 - Stored XSS Vulnerability
No description provided by source. Exploit Title: ruubikcms v1.1.1 Stored XSS Google Dork: powered by ruubikcms Date: 2013-6-5 Exploit Author: expl0i13r Vendor Homepage: http://www.ruubikcms.com/ Software Link: http://www.ruubikcms.com/ruubikcms/download.php?f=ruubikcms111.zip Version: 1.1.1 Test...
Friendly Technologies TR-069 ACS 2.8.9 Login SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38634/info Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
PRE PRINTING STUDIO SQL Injection
No description provided by source. Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...
Friendly <= 1.0d1 (friendly_path) Remote File Inclusion Vulnerabilities
No description provided by source. Friendly 1.0d1 friendlypathRemote File Inclusion Vulnerabilities D.Script: http://friendlyphp.org/downloads/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/friendly/core/data/load.php?friendlypath=shell...
Article Friendly 'filename' Parameter Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38461/info Article Friendly is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information...
iLister Listing Software LFI Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iLister listing script LFi Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://www.worksforweb.com/ Autho...
Article Friendly CSRF Vulnerability
No description provided by source. ======================================================================= Article friendly CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected]...