ThinkSAAS 2.2 存储型XSS(绕过防护机制)

简要描述： rt 详细说明： 富文本过滤的代码片段： function cleanJs$text $text = trim $text ; //$text = stripslashes $text ; // 完全过滤注释 $text = @pregreplace '//', '', $text ; // 完全过滤动态代码 $text = @pregreplace '//', '', $text ; // 完全过滤js $text = @pregreplace '//', '', $text ; // 过滤多余html $text = @pregreplace '//i', '', $te...

PT-2014-5346

Name of the Vulnerable Software and Affected Versions OpenStack Dashboard Horizon versions 2013.2.3 and earlier OpenStack Dashboard Horizon versions 2014.1 and earlier, excluding 2014.1.2 and later OpenStack Dashboard Horizon versions Juno and earlier, excluding Juno-2 and later Description A...

cmseasy 反射型XSS无视浏览器filter无视360webscan

简要描述： RT，cmseasy后台是可以csrf getshell的。但我这里，就算以后cmseasy后台加token、验证referer，我也不怕了，反正是XSS，可以窃取token的，referer也是本站。 详细说明： 这个反射型XSS出在/bbs/index.php中，第4行： window.location.href='". strreplace'/bbs', '', $SERVER'REQUESTURI'."';"; requireonce 'bbspublic.php'; $category = dbbbscategory::getInstance;...

CVE-2014-4596: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in js/button-snapapp.php in the SnapApp plugin 1.5 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 msg or 2 act parameter...

CVE-2014-4579: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/test.php in the Appointments Scheduler plugin 1.5 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

PT-2014-5993

Name of the Vulnerable Software and Affected Versions Appointments Scheduler plugin versions 1.5 and earlier for WordPress Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the...

PT-2014-6009

Name of the Vulnerable Software and Affected Versions SnapApp plugin versions 1.5 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the msg or act parameters in the...

CVE-2014-4575

Cross-site scripting XSS vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

WP-SpamFree WordPress Spam Plugin SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress wpsf-js plugin, SQL Injection Date: 2011-09-25 Author: cheki Version:3.2.1 Tested on:linux Used: sqlmap SQL Injection http://target/wp-content/plugins/wp-spamfree/js/wpsf-js.php?id=1 Exploit:id=-1; WAITFOR DELAY '0:0:5';-- or id=-1 AND...

CVE-2014-4575: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter...

WordPress Js-appointment plugin <= 1.5 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Js-appointment plugin = 1.5 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/js-appointment.1.5.zip Version: 1.5 tested Note:...

WeBid 1.0.2 persistent XSS via SQL Injection

No description provided by source. Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: powered by WeBid Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP Info: Open source php/mysql full...

Alt-N MDaemon 13.0.3 and 12.5.6 Email Body HTML/JS Injection Vulnerability

No description provided by source. ============================================================== Alt-N MDaemon Email Body HTML/JS Injection Vulnerability ============================================================== Software: Alt-N MDaemon v13.0.3 and prior versions Vendor: http://www.altn.com/...

PT-2014-5989

Name of the Vulnerable Software and Affected Versions Wikipop plugin versions 2.0 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the s parameter in the js/window.php file. Recommendations For Wikipop plugin versions 2.0 and...

WordPress SnapApp Plugin <= 1.5 - Multiple XSS

Because of these multiple vulnerabilities in js/button-snapapp.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Wikipop Plugin <= 2.0 - XSS

Because of this vulnerability in js/window.php, the attackers can inject arbitrary web script or HTML via the "s" parameter. Solution Update the plugin...

WordPress Appointment Scheduler Plugin <= 1.5 - XSS

Because of this vulnerability in js/test.php, the attackers can inject arbitrary web script or HTML via the lang parameter. Solution Update the plugin...

Microsoft Internet Explorer Js::PathTypeHandlerBase Improper Indexing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Nosql-Exploitation-Framework - A FrameWork For NoSQL Scanning and Exploitation Framework

A FrameWork For NoSQL Scanning, Enumeration and Exploitation. NoSQL Databases are schema less databases. They were invented to store data easily and flexibly. NoSQL Databases have gained popularity and its security has always been under the scanner. The NoSQL Exploitation Framework focuses...

PT-2014-1062

Name of the Vulnerable Software and Affected Versions Internet Explorer affected versions not specified Description The issue is caused by an error in the Js::PathTypeHandlerBase::SetProperty function due to improper indexing when certain arguments are input, allowing an attacker to execute...