2345 matches found
TAGAWA Takao TransmitMail Cross-Site Scripting Vulnerability
TAGAWA Takao TransmitMail is a PHP-based mail program. TAGAWA Takao TransmitMail suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user sessions...
Adobe ColdFusion suffers from an unspecified cross-site scripting vulnerability (CNVD-2015-02633)
Adobe ColdFusion is a dynamic Web server , its CFML is a programming language , similar to the current JSP in the JSTL. Adobe ColdFusion has an unspecified cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which c...
Ebay Inc Xcom #4 - (Item Preview) Persistent Vulnerability
Document Title: =============== Ebay Inc Xcom 4 - Item Preview Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1215 Release Date: ============= 2015-03-23 Vulnerability Laboratory ID VL-ID: ==================================== 12...
H5 images to identify the presence of vulnerabilities can cause malicious script to be executed-a vulnerability warning-the black bar safety net
Vulnerability analysis A, detailed description: http://read.html5.qq.com/image?imageUrl=http://XXX Is for mobile phone users to transfer compression third-party image services, and using the HAProxy to do load balancing. The actual test found that due to the compression transfer no filter picture...
Migrating Elastix 2.5 Remote Code Execute 0day Exploit
Migrating Elastix 2.5 suffers from an authenticated arbitrary command execution vulnerability. The issue is caused due to the improper verification of uploaded files. This can be exploited to execute arbitrary code by creating or uploading a malicious script file. Vulnerability tested on CentOS 7...
2 5 2 9 net Union the use of the latest ie vulnerability mandatory installation of light micro-end-bug warning-the black bar safety net
I'm using Baidu browser ie compatible mode to browse http://www.dy2018.com this movie site, and found that somehow run the one called“Shine micro-end”of the game client, then I used smartsniff packet capture analysis, in the view source when the found a 2 5 2 9 net Union js advertising code, whic...
PHPFox - Persistent Cross-Site Scripting
Exploit Title: PHPFox XSS AdminCP Date: 2014-10-22 Exploit Author: Wesley Henrique Leite aka "spyk2r" Vendor Homepage: http://www.moxi9.com Version: All version CVE : CVE-2014-8469 Response Vendor: fixed 2014-10-23 to v4 Beta + DESCRIPTION The system stores all urls accessed in a database table,...
php: type confusion issue in phpinfo() leading to information leak
A type confusion issue was found in PHP's phpinfo function. A malicious script author could possibly use this flaw to disclose certain portions of server memory...
Popular Science Website Infected, Serving Malware
The website of widely read Popular Science magazine is reportedly hosting a malicious script that is redirecting site visitors to a third-party domain containing an exploit kit, which is infecting users by uploading files containing malware to their machines. To give an idea of the scope of this...
php: SPL Iterators use-after-free
A use-after-free flaw was found in the way PHP handled certain Standard PHP Library SPL Iterators. A malicious script author could possibly use this flaw to disclose certain portions of server memory...
MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure
This module will use the Microsoft XMLDOM object to enumerate a remote machine's filenames. It will try to do so against Internet Explorer 8 and Internet Explorer 9. To use it, you must supply your own list of file paths. Each file path should look like this: c:\windows\system32\calc.exe Module...
Barracuda Web Security Flex 4.1 - Persistent Vulnerabilities
Document Title: =============== Barracuda Web Security Flex 4.1 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=750 BARRACUDA NETWORK SECURITY ID: BNSEC-699 Release Date: ============= 2014-08-22 Vulnerability Laboratory ID...
Prototype of an PHP application 0.1 ident/loginliste.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
Joomla! 1.5.x Cross Site Scripting and Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35544/info Joomla! is prone to multiple cross-site scripting and information-disclosure vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Bajie Webserver 0.78/0.90 Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2388/info It is possible to execute arbitrary commands on a host running Bajie Webserver. A remote user can use Bajie's built-in upload feature to place malicious scripts on Bajie webservers. These uploaded scripts are...
Prototype of an PHP application 0.1 ident/loginmodif.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
Ji-takz Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18474/info Ji-takz is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file...
Prototype of an PHP application 0.1 index.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
Bee-hive 1.2 - Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18654/info Bee-hive is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to have an arbitrary remote...
VoteBox 2.0 Votebox.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12806/info It is reported that VoteBox is affected by a remote PHP file include vulnerability. This issue is due in part to the application failing to properly sanitize user-supplied input to the 'votebox.php' script...