CVE-2017-17888

cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 -- AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-DLG, AEDILIS SMART-1, SYXTHSENSE WebBiter, ABB SREA, and ASCON DY WebServer devices, allows remote authenticated users to execute arbitrary ...

HMS Testimonials 2.0.10 - XSS

The HMS Testimonials WordPress plugin was affected by a XSS security vulnerability...

HMS Testimonials 2.0.10 - CSRF

The HMS Testimonials WordPress plugin was affected by a CSRF security vulnerability...

CONTROLzx HMS 3.3.4 shared_order.php sharedPlanID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

CONTROLzx HMS 3.3.4 dedicated_order.php dedicatedPlanID Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

Wordpress HMS Testimonials Plugin 2.0.10 - Multiple Vulnerabilities

No description provided by source. Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/...

CONTROLzx HMS 3.3.4 server_management.php plan_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17282/info CONTROLzx HMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to...

DRZES HMS 3.2 Login.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15766/info DRZES HMS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scri...

CVE-2013-4240

Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add new testimonials via the hms-testimonials-addnew page, 2 add new groups via the...

CVE-2013-4240

The CVE-2013-4240 entry concerns the WordPress HMS Testimonials plugin, affected in versions before 2.0.11. The vulnerability set consists of multiple CSRF flaws that allow an attacker to hijack an administrator’s authenticated session and perform actions such as adding testimonials, adding group...

[RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities

Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request Forgery CWE-352 - Cross-Site Scripting CWE-79...

WordPress Hms Testimonials Plugin 2.0.10 - Multiple Vulnerabilities

Hms Testimonials plugin is prone to multiple vulnerabilities, such as cross-site scripting and cross-site request forgery vulnerabilities. Solution Update the plugin...

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner...

WordPress Plugin Hms Testimonials 2.0.10 - Multiple Vulnerabilities

Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request...

WordPress HMS Testimonials 2.0.10 XSS / CSRF Vulnerabilities

WordPress HMS Testimonials plugin version 2.0.10 suffers from cross site request forgery and cross site scripting vulnerabilities. Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/...

WordPress HMS Testimonials 2.0.10 XSS / CSRF

Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request...

Pre Hospital Management System - 'department.php?id' SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: department.php id Remote SQL Injection Vulnerability ? Vendor:www.preproject.com/hms.asp ? ? Software:PRE HOSTPITAL MANAGEMENT SYSTEM ? Price $750.00 ? author: R3d-D3v!L ? ?Date: 16.dec.2009 ?T!ME: 11:30 p...

HMS HICP Modification / Intellicom NetBiterConfing.exe Stack Overflow

----- More info http://reversemode.com/index.php?option=comcontent&task=view&id=65&Itemid=1 ----- 1st PART "HMS HICP Protocol" AFAIK there is no public documentation about this protocol, if not so please let me know and I'll repeatedly hit myself with a sharpened stick.All the information present...

Exposing HMS HICP Protocol + Intellicom NetBiterConfig.exe Remote Buffer Overflow (Not patched)

----- More info http://reversemode.com/index.php?option=comcontent&task=view&id=65&Itemid=1 ----- 1st PART "HMS HICP Protocol" AFAIK there is no public documentation about this protocol, if not so please let me know and I'll repeatedly hit myself with a sharpened stick.All the information present...