12 matches found
iwms.fr Cross Site Scripting vulnerability OBB-2856928
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Trimble / Manhattan Software IWMS 9.x XXE Injection
https://www.osisecurity.com.au/manhattan-software-iwms-integrated-workplace-management-system-xml-external-entity-xxe-injection-file-disclosure.html Date: 04-Apr-2017 Product: Trimble / Manhattan Software IWMS integrated workplace management system Versions affected: 9.x Vulnerability: XML Extern...
IWMS /Admin/login.aspx.cs SQL注入漏洞
No description provided by source...
MOJO's IWMS <= 7 SQL Injection & Cross Site Scripting
No description provided by source. Exploit Title: MOJO's IWMS = 7 SQL Injection & Cross Site Scripting. Date: 2/02/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.comhttp://gmail.com | www.DigitalWhisper.co.ilhttp://www.DigitalWhisper.co.il Software Link: http://www.mojo.co.il Version: = 7 Tested on...
MOJO's IWMS <= 7 SQL Injection & Cross Site Scripting
Exploit for unknown platform in category web applications ===================================================== MOJO's IWMS YourXSSHere SQL Injection A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL...
MOJOs IWms 7 - SQL Injection Cross-Site Scripting
MOJOs IWms 7 - SQL Injection Cross-Site Scripting Exploit Title: MOJO's IWMS | www.DigitalWhisper.co.il Software Link: http://www.mojo.co.il Version: YourXSSHere SQL Injection A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the...
Mojo's IWMS 7 SQL Injection / Cross Site Scripting
Exploit Title: MOJO's IWMS | www.DigitalWhisper.co.il Software Link: http://www.mojo.co.il Version: YourXSSHere SQL Injection A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can re...
MOJO's IWms 7 - SQL Injection / Cross-Site Scripting
Exploit Title: MOJO's IWMS | www.DigitalWhisper.co.il Software Link: http://www.mojo.co.il Version: YourXSSHere SQL Injection A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can re...
MOJO's IWMS Cross Site Scripting
Exploit Title: MOJO's IWMS Login page XSS and Cookies Manipulation. Date: 17/12/2007 Author: cp77fk4r | Empty0pagEYOU-KNOWgmail.com Software Link: http://www.mojo.co.il/ Version: X = 7 Expl0its: XSS -http://SITE/upload/default.asp?mode=wrong&ERRMSG=XSS-Vuln -Cookies Manipulation...
MOJO's IWMS Login page XSS and Cookies Manipulation
No description provided by source. Exploit Title: MOJO's IWMS Login page XSS and Cookies Manipulation. Date: 17/12/2007 Author: cp77fk4r | Empty0pagEYOU-KNOWgmail.comhttp://gmail.com Software Link: http://www.mojo.co.il/ Version: X = 7 Expl0its: XSS...
MOJO IWms 7 - default.asp Cookie Manipulation
MOJO IWms 7 - default.asp Cookie Manipulation source: https://www.securityfocus.com/bid/41746/info MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this vulnerability could allow an attacker to masquerade as another...
MOJO IWms 7 - 'default.asp' Cookie Manipulation
source: https://www.securityfocus.com/bid/41746/info MOJO IWMS is prone to a cookie-manipulation vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this vulnerability could allow an attacker to masquerade as another user. This may allow the attacker to steal...