Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities

Document Title: =============== Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-10 Vulnerability Laboratory ID VL-ID: ==================================== 5 Abstract Advisory Information: ============================== The Vulnerability-Lab Team discover...

Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities

Document Title: =============== Asterisk2Billing v1.9.4 - Multiple Web Vulnerabilities Release Date: ============= 2011-08-10 Vulnerability Laboratory ID VL-ID: ==================================== 5 Abstract Advisory Information: ============================== The Vulnerability-Lab Team discover...

CGI Generic XSS (extended patterns)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings with malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected...

Mobilkom Austria Cross Site Scripting

G'Day Ladies and Gents, it has been already over 3 weeks now, since they've told me they're going to fix this flaws, as soon as they've resolved more important tasks... I think they had enough time, so here is my first disclosure. Just a little, not that important non-persistent XSS. Cookie...

Evo CMS 2.1.0 - Multiple Web Vulnerabilities

Document Title: =============== Evo CMS 2.1.0 - Multiple Web Vulnerabilities Release Date: ============= 2011-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 191 Product & Service Introduction: =============================== N/A Abstract Advisory Information:...

PBX Phone System v2.x & 3.x - Multiple Web Vulnerabilities

Document Title: =============== PBX Phone System v2.x & 3.x - Multiple Web Vulnerabilities References Source: ==================== CVE: 2009-4458 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4458 OSVDB-ID: 61357 http://osvdb.org/show/osvdb/61357 EDB-ID: 10645...

[SECURITY] CVE-2011-1077: Apache Archiva Multiple XSS vulnerability

CVE-2011-1077: Apache Archiva Multiple XSS vulnerability Severity: High Vendor: The Apache Software Foundation Versions Affected: Archiva 1.3.0 - 1.3.4 The unsupported versions Archiva 1.0 - 1.2.2 are also affected. Description: The multiple XSS issues found are both Stored Persistent and Reflect...

Supreme Court of Canada vulnerable to non prsistance xss attack !

Supreme Court of Canada vulnerable to xss attack ! Vunl Link : https://sr.scc-csc.gc.ca/search?client=SCC-CSC&site=Internet&output=xmlnodtd&proxystylesheet=SCC-CSC&hl=en&oe=latin1&ie=latin1&q=%3E%22%3E%3CMARQUEE%3EHACKED+BY+ZERO+COOL%3C%2FMARQUEE%3E&btnG=Search Found n Submitted by : Zero Cool...

TinyWebGallery: XSS + Directory Traversal

Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples:...

TinyWebGallery v 1.8.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview,...

TinyWebGallery 1.8.3 - Multiple Vulnerabilities

Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples:...

TinyWebGallery 1.8.3 Cross Site Scripting / Directory Traversal

Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples:...

vBSEO Sitemap 2.5/3.0 - Multiple Vulnerabilities

vBSEO Sitemap - Multiple Vulnerabilities Versions Affected: 2.5 and 3.0 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and the only professional, fully supported solution. A full package of SEO enhancements, one install,...

Social Share 2010-06-05 Cross Site Scripting

www.eVuln.com advisory: "search" - Non-persistent XSS in Social Share Summary: http://evuln.com/vulns/169/summary.html Details: http://evuln.com/vulns/169/description.html -----------Summary----------- eVuln ID: EV0169 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low Typ...

www.eVuln.com : "error" Non-persistent XSS in slickMsg

www.eVuln.com advisory: error - Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/163/summary.html Details: http://evuln.com/vulns/163/description.html -----------Summary----------- eVuln ID: EV0163 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Sit...

Social Share Cross Site Scripting

=========================================== www.eVuln.com advisory: "title" and "ur"l - Non-persistent XSS in Social Share Summary: http://evuln.com/vulns/164/summary.html Details: http://evuln.com/vulns/164/description.html -----------Summary----------- eVuln ID: EV0164 Software: Social Share...

slickMsg 0.7-alpha Cross Site Scripting

www.eVuln.com advisory: error - Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/163/summary.html Details: http://evuln.com/vulns/163/description.html -----------Summary----------- eVuln ID: EV0163 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Sit...

www.eVuln.com : "post" - Non-persistent XSS in slickMsg

www.eVuln.com advisory: "post" - Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/161/summary.html Details: http://evuln.com/vulns/161/description.html -----------Summary----------- eVuln ID: EV0161 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Si...

slickMsg 0.7-alpha Cross Site Scripting

www.eVuln.com advisory: "post" - Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/161/summary.html Details: http://evuln.com/vulns/161/description.html -----------Summary----------- eVuln ID: EV0161 Software: slickMsg Vendor: n/a Version: 0.7-alpha Critical Level: low Type: Cross Si...

www.eVuln.com : Non-persistent XSS in slickMsg

www.eVuln.com advisory: Non-persistent XSS in slickMsg Summary: http://evuln.com/vulns/159/summary.html Details: http://evuln.com/vulns/159/description.html -----------Summary----------- eVuln ID: EV0159 Software: slickMsg Version: 0.7-alpha Critical Level: low Type: Cross Site Scripting Status:...