Boozt Fashion AB: PHP info page disclosure on http://www.day.dk/

Hi, Boozt team. Description: phpinfo is a debug functionality that prints out detailed information on both the system and the PHP configuration. Step to reproduce: 1. Go to http://www.day.dk/check.php An attacker can obtain information such as: •Exact PHP version. •Exact OS and its version...

cda.pl XSS vulnerability

Vulnerable URL: http://www.cda.pl/info/--...

bouwenwonen.net XSS vulnerability

Vulnerable URL: http://www.bouwenwonen.net/info/index.asp Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 340531 Google Pagerank| 4 VIP website status:| No...

Cross site scripting

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...

CVE-2011-4346

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...

CVE-2011-4346

CVE-2011-4346 corresponds to an XSS flaw in the web interface of Red Hat Network Satellite 5.4.1. An authenticated RHN Satellite user could inject arbitrary script/HTML via the Description field of the asset tag in a Custom Info page. The issue is documented across multiple sources (RHSA-2011:179...

CVE-2011-4346: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web interface in Red Hat Network RHN Satellite 5.4.1 allows remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a Custom Info page...

PT-2011-4937 · Red Hat · Red Hat Network Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Network RHN Satellite version 5.4.1 Description: A cross-site scripting XSS issue exists in the web interface, allowing remote authenticated users to inject arbitrary web script or HTML via the Description field of the asset tag in a...

CVE-2005-2038: Undefined Security Weakness

Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page...