2367 matches found
Invision Power Board 3.0.5 Calendar Application Script Insertion Vulnerability
No description provided by source. Credits ============ Discovered by: David Vieira-Kurz http://www.majorsecurity.info/penetrationstest.php Affected Products: ---------------------------- Invision Power Board 3.0.5 and prior Introduction ============ Invision Power Board is a widely used forums...
Unfixed Script Insertion vulnerability at rapi.nl
Security researcher Killer-TR, has submitted on 06/10/2010 a Script Insertion vulnerability affecting rapi.nl, which at the time of submission ranked 5970364 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently unfixed. I...
Apple Webkit ProcessInstruction Target Error Message Insertion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple's Webkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with how WebKit inserts...
Cross-site Scripting (XSS) Vulnerabilities in synType CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in synType CMS which could be exploited to perform cross-site scripting and script insertion attacks. 1 Cross-site scripting XSS vulnerability in synType CMS The vulnerability exists due to input sanitation error in...
Multiple Vulnerabilities in AneCMS
High-Tech Bridge SA Security Research Lab has discovered three vulnerabilities in AneCMS which could be exploited to perform cross-site scripting and script insertion attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting XSS vulnerability in AneCMS The...
TomatoCMS Script Insertion Vulnerabilities
1 Affected Software TomatoCMS version 2.0.4. NOTE: Other versions may also be affected. ====================================================================== 2 Severity Rating: Less critical Impact: Cross Site Scripting Where: From remote...
HP System Management Homepage < 6.1.0.102 / 6.1.0-103 Multiple Vulnerabilities
According to the web server banner, the version of HP System Management Homepage SMH running on the remote host is potentially affected by the following vulnerabilities : - Session renegotiations are not handled properly, which could be exploited to insert arbitrary plaintext by a...
Multiple Vulnerabilities in LightNEasy CMS
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in LightNEasy CMS which could be exploited to perform script insertion, cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in LightNEasy CMS 1.1 The vulnerability...
Secunia Research: TomatoCMS Script Insertion Vulnerabilities
====================================================================== Secunia Research 10/05/2010 - TomatoCMS Script Insertion Vulnerabilities - ====================================================================== Table of Contents Affected...
vBulletin BB Code Script Insertion Vulnerability
No description provided by source. vBulletin 3.x / 4.x MaXe has reported a vulnerability in vBulletin, which can be exploited by malicious users to conduct script insertion attacks. The vulnerability exists in the parsing of BB Code when creating content that uses custom tags. This can be exploit...
Multiple Vulnerabilities in NPDS REvolution
High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in NPDS REvolution which could be exploited to perform cross-site scripting XSS, script insertion and CSRF attacks and execute arbitrary SQL commands in applications database. 1 Cross-site scripting vulnerabilities ...
Secunia Research: e107 Content Management Plugin Script Insertion Vulnerability
====================================================================== Secunia Research 19/04/2010 - e107 Content Management Plugin Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...
Unfixed Script Insertion vulnerability at www.arsenalislife.com
Security researcher -Chosen-, has submitted on 15/04/2010 a Script Insertion vulnerability affecting www.arsenalislife.com, which at the time of submission ranked 13842876 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...
RJ-iTop Network Vulnerability Scanner SQL Injection
RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities Vulnerable: v3.0.7.x Vendor: www.rj-itop.com Category: Input Validation Error Impact: SQL injection Details: ========= Multiple SQL Injection Vulnerabilities has been found in DRJ-iTop Network Vulnerability Scanne...
openx advertising system 0DYA-vulnerability warning-the black bar safety net
openx advertising system 0dayoriginal author: YJPS reprint please indicate the Penetration of a foreign station when the discovery and successful use of Using the method first go to the official under a useless plugin and then modify the back to plug in a normal PHP file inserted into a word to...
Unfixed Script Insertion vulnerability at www.megwhitman.com
Security researcher airizon, has submitted on 03/11/2010 a Script Insertion vulnerability affecting www.megwhitman.com, which at the time of submission ranked 2457485 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...
OpenSSL < 0.9.8m Multiple Vulnerabilities
Binary data 801064.prm...
In ASP the database insert webshell small conference-vulnerability warning-the black bar safety net
Some time ago, the new cloud management system, dynamic network Forum get a WEBSHELL and this, today, we discuss this aspect of things, in fact, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case?...
Unfixed Script Insertion vulnerability at www2.bazinama.com
Security researcher DevilZ TM, has submitted on 25/02/2010 a Script Insertion vulnerability affecting www2.bazinama.com, which at the time of submission ranked 43669 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently...
MediaWiki Parser Script Insertion (CVE-2006-2611)
A Wiki is generally referred to a collaborative online system that allows many users to easily contribute content by creating web pages that have a common look and feel and that may be changed and revised at any time. MediaWiki is a popular implementation of the Wiki system. It uses a number of P...