171 matches found
w-CMS 2.01 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet...
PT-2011-01: Cross-Site Scripting in Kayako Support Suite
Positive Research Center has discovered XSS in Kayako Support Suite. Application insufficiently verifies incoming data in "Subject" parameter in LiveSupport module. An attacker can use the vulnerability to inject and execute HTML code and scripts in a user's browser within the trust relationship...
PT-2011-04: Cross-Site Scripting in Kayako Support Suite
Positive Research Center has discovered multiple XSS vulnerabilties in Kayako Support Suite. 1. Application insufficiently verifies subscriberdata incoming parameter in /staff/index.php?m=news&a=importexport script. An attacker with "staff" privileges can use the vulnerabilty to inject and execut...
Skype 5.5.0.113 Cross Site Scripting
+-----------------------------------------------------------------------------+ | noptrix.net - Public Security Advisory | +-----------------------------------------------------------------------------+ Date: ----- 08/17/2011 Vendor: ------- Skype Limited - http://www.skype.com/ Affected Software...
Fofou Forums Cross Site Scripting
Exploit Title: Permanent XSS and Html Code Injection in the Fofou Forums Google Dork: intext:Powered by fofou Date: 15.08.2011 Author: Sony Software Link: http://blog.kowalczyk.info/software/fofou/index.html Version: all version...
Safenet Sentinel and 7-T Input Sanitization Vulnerability
Overview ICS-CERT originally released advisory ICSA-11-314-01P on the US-CERT secure portal on November 14, 2011. This web page release was delayed to allow users time to download and install the update. Security researcher Carlos Mario Penagos Hollman of Synapse-labs has identified an input...
phpMyAdmin 'error.php' Cross Site Scripting Vulnerability
phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
leaftec cms multiple vulnerabilities
Exploit for php platform in category web applications ==================================== leaftec cms multiple vulnerabilities ==================================== Exploit Title: leaftec cms multiple vulnerabilities Date: 21.03.2010 Author: Valentin Version: Tested on: Debian etch CVE : Code : :...
leaftec CMS - Multiple Vulnerabilities
Exploit Title: leaftec cms multiple vulnerabilities Date: 21.03.2010 Author: Valentin Höbel Version: Tested on: Debian etch CVE : Code : :: General information :: leaftec cms multiple vulnerabilities discovered :: by Valentin Höbel :: [email protected] :: Product information :: Name = leafte...
Debian DSA-1883-1 : nagios2 - missing input sanitising
Several vulnerabilities have been found in nagios2, a host/service/network monitoring and management system. The Common Vulnerabilities and Exposures project identifies the following problems : Several cross-site scripting issues via several parameters were discovered in the CGI scripts, allowing...
PacketFence Network Access Controller XSS vulnerability
Exploit for unknown platform in category web applications ======================================================= PacketFence Network Access Controller XSS vulnerability ======================================================= Title : Injection Flaw in PacketFence Network Access Controller Date :...
PacketFence Network Access Controller - Cross-Site Scripting
PacketFence Network Access Controller - Cross-Site Scripting Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Fr...
Micronet SP1910 Cross Site Scripting
Exploit: XSS & Html code injection in Micronet SP1910 data access controller UI Date: 27-11-2009 Author: K053 Vendor: http://www.micronet.info/modeldetail.aspx?seriesno=6&sno=472 Tested on : Private Networks ------------------------------------------------------------------------------------ Note...
Micronet SP1910 Data Access Controller UI - Cross-Site Scripting HTML Code Injection
Micronet SP1910 Data Access Controller UI - Cross-Site Scripting HTML Code Injection Exploit: XSS & Html code injection in Micronet SP1910 data access controller UI Date: 27-11-2009 Author: K053 Vendor: http://www.micronet.info/modeldetail.aspx?seriesno=6&sno=472 Tested on : Private Networks...
PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module
Exploit for unknown platform in category web applications ======================================================== PHP-Nuke alert/XSS/.source 2. Html code injection : -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= 0day.today 2018-03-19...
Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection
Exploit for unknown platform in category web applications =================================================================== Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection =================================================================== Exploit: XSS & Html code injection ...
Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection
No description provided by source. Exploit: XSS & Html code injection in Micronet SP1910 data access controller UI Date: 27-11-2009 Author: K053 Vendor: http://www.micronet.info/modeldetail.aspx?seriesno=6&sno=472 Tested on : Private Networks...
PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module
No description provided by source. Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and check user entry point for news rate...
PHP-Nuke 8.0 - News Module Cross-Site Scripting HTML Code Injection
PHP-Nuke 8.0 - News Module Cross-Site Scripting HTML Code Injection Software Link: http://www.phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=1 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= note : This bug found by tampering passed data . coders don't sanitize and che...
Micronet SP1910 Data Access Controller UI - Cross-Site Scripting / HTML Code Injection
Exploit: XSS & Html code injection in Micronet SP1910 data access controller UI Date: 27-11-2009 Author: K053 Vendor: http://www.micronet.info/modeldetail.aspx?seriesno=6&sno=472 Tested on : Private Networks ------------------------------------------------------------------------------------ Note...