PHPCityPortal SQL Injection

Script Name: PHPCityPortal Auth Bypass SQL Injection Vulnerability Author: CoBRa21 Mail: [email protected] Script Page: http://phpcityportal.com/ DOrk: intext:"Powered by PHPCityPortal.com" EXPLOIT Username: 'or' Password: 'or' http://localhost/path/login.php Demo:...

PHPCityPortal - Authentication Bypass

Script Name: PHPCityPortal Auth Bypass SQL Injection Vulnerability Author: CoBRa21 Mail: [email protected] Script Page: http://phpcityportal.com/ DOrk: intext:"Powered by PHPCityPortal.com" EXPLOIT Username: 'or' Password: 'or' http://localhost/path/login.php Demo:...

DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2

Identification : DOINGSOFT-2008-03-10-001 CVE-ID : pending Discovery date : 14/12/2007 Correcting Date : 03/04/2008 How to get the patch : http://support.businessobjects.com/downloads/criticalhotfixes/default.asp choose "FixPack 3.5" Publishing date : 14/04/2008 Product : Business Object Infoview...

Unfixed XSS vulnerability at www.freedback.com

Security researcher Dr.Optix, has submitted on 09/09/2007 a cross-site-scripting XSS vulnerability affecting www.freedback.com, which at the time of submission ranked 46026 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is...

should be able to login only via https

you should be able to configure JIRA to login via HTTPS. this is almost possible in 2.4.1. You can specify an https URL in security-config.xml as the login.url parameter. this makes loing links from e.g. the issue view page work correctly. a slight problem here is that the session remiains in the...