Lucene search
+L

596 matches found

securityvulns
securityvulns
added 2008/09/30 12:00 a.m.56 views

The Gemini Portal <= 4.7 / Insecure Cookie Handling Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal = 4.7 / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: The Gemini Portal Version: = 4.7 File affected: admin/ Download:...

7AI score
SaveExploits0
seebug.org
seebug.org
added 2008/09/27 12:00 a.m.9 views

The Gemini Portal <= 4.7 Insecure Cookie Handling Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal = 4.7 / Insecure Cookie Handling Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: The Gemini Portal Version: = 4.7 File affected: admin/...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/09/27 12:00 a.m.23 views

gemini-rfi.txt

The Gemini Portal Multiple Remote File inj. version: 4.7 ---------------------------------------------------------- Discovered By: ZoRLu Date: 26.09.2008 Home: www.z0rlu.blogspot.com contact: [email protected] contact: [email protected] N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK,...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/09/27 12:00 a.m.16 views

gemini-cookie.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simple perl script to send GET and POST packages. Fir...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2008/09/27 12:00 a.m.19 views

The Gemini Portal (lang) Remote File Inclusion Vulnerabilities

No description provided by source. The Gemini Portal Multiple Remote File inj. version: 4.7 ---------------------------------------------------------- Discovered By: ZoRLu Date: 26.09.2008 Home: www.z0rlu.blogspot.com contact: [email protected] contact: [email protected] N0T: TUM iSLAM ALEMiNiN...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/09/26 12:00 a.m.42 views

The Gemini Portal 4.7 - 'lang' Remote File Inclusion

The Gemini Portal Multiple Remote File inj. version: 4.7 ---------------------------------------------------------- Discovered By: ZoRLu Date: 26.09.2008 Home: www.z0rlu.blogspot.com contact: [email protected] contact: [email protected] N0T: TUM iSLAM ALEMiNiN BAYRAMINI KUTLARIM...! N0T: YALNIZLIK,...

9.3CVSS5.8AI score0.03003EPSS
SaveExploits2
exploitpack
exploitpack
added 2008/09/26 12:00 a.m.16 views

The Gemini Portal 4.7 - Insecure Cookie Handling

The Gemini Portal 4.7 - Insecure Cookie Handling -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simp...

0.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/09/26 12:00 a.m.12 views

The Gemini Portal 4.7 - lang Remote File Inclusion

The Gemini Portal 4.7 - lang Remote File Inclusion The Gemini Portal Multiple Remote File inj. version: 4.7 ---------------------------------------------------------- Discovered By: ZoRLu Date: 26.09.2008 Home: www.z0rlu.blogspot.com contact: [email protected] contact: [email protected] N0T: TUM iSLA...

7.5AI score
SaveExploits0
zdt
zdt
added 2008/09/26 12:00 a.m.20 views

The Gemini Portal (lang) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== The Gemini Portal lang Remote File Inclusion Vulnerabilities ============================================================== The Gemini Portal Multiple Remote File inj. version:...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/09/26 12:00 a.m.20 views

The Gemini Portal <= 4.7 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =============================================================== The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/09/26 12:00 a.m.29 views

The Gemini Portal 4.7 - Insecure Cookie Handling

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simple perl script to send GET and POST packages. Fir...

6.8CVSS5.8AI score0.02532EPSS
SaveExploits2
Prion
Prion
added 2006/03/15 4:06 p.m.19 views

Cross site scripting

Cross-site scripting XSS vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.0118EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2006/03/15 4:06 p.m.16 views

CVE-2006-1239

Cross-site scripting XSS vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.0118EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2006/03/15 4:00 p.m.28 views

CVE-2006-1239

Cross-site scripting XSS vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

5.6AI score0.0118EPSS
SaveExploits0References5
CVE
CVE
added 2006/03/15 4:00 p.m.55 views

CVE-2006-1239

The CVE-2006-1239 entry describes a Cross-site scripting (XSS) vulnerability in Gemini 2.0, specifically in issue/createissue.aspx where an attacker can inject arbitrary script via the rtcDescription$RadEditor1 field. The issue is confirmed by NVD data with a CVSSv2 base score of 4.3 (MEDIUM) and...

4.3CVSS5.6AI score0.0118EPSS
SaveExploits0References5Affected Software1
securityvulns
securityvulns
added 2006/03/14 12:00 a.m.43 views

[SA19049] Gemini &quot;rtcDescription$RadEditor1&quot; Script Insertion Vulnerability

TITLE: Gemini "rtcDescription$RadEditor1" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA19049 VERIFY ADVISORY: http://secunia.com/advisories/19049/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Gemini 2.x http://secunia.com/product/8406/...

0.4AI score
SaveExploits0
Rows per page
Query Builder