181 matches found
CVE-2014-9446
Multiple cross-site scripting XSS vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attackers to inject arbitrary web script or HTML via the sortby parameter to the 1 opac parameter in opac-search.pl or 2 intranet parameter in catalogue/search.pl...
CVE-2014-9446
Koha vulnerability CVE-2014-9446 affects the Staff client in Koha versions prior to 3.16.6 and 3.18.x prior to 3.18.2. The issue is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script/HTML via the sort_by parameter to (1) opac-search.pl (opac) or (2) c...
PT-2015-4209
Name of the Vulnerable Software and Affected Versions Koha versions prior to 3.16.6 Koha versions 3.18.x prior to 3.18.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the sort by parameter to the 1 opac parameter in "opac-search.pl"...
CVE-2014-9446: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attackers to inject arbitrary web script or HTML via the sortby parameter to the 1 opac parameter in opac-search.pl or 2 intranet parameter in catalogue/search.pl...
PMB 4.1.3 - (Authenticated) SQL Injection
PMB 4.1.3 - Authenticated SQL Injection Exploit Title: PMB = 4.1.3 Post-Auth SQL Injection Vulnerability Google Dork: inurl:opaccss Date: 25-12-2014 Exploit Author: XD4rker Ismail Belkacim Email: xd4rkeratgmail.com Twitter: @xd4rker Vendor Homepage: http://www.sigb.net Software Link:...
PMB 4.1.3 - (Authenticated) SQL Injection
Exploit Title: PMB = 4.1.3 Post-Auth SQL Injection Vulnerability Google Dork: inurl:opaccss Date: 25-12-2014 Exploit Author: XD4rker Ismail Belkacim Email: xd4rkeratgmail.com Twitter: @xd4rker Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files...
PMB 4.1.3 SQL Injection
Exploit Title: PMB = 4.1.3 Post-Auth SQL Injection Vulnerability Google Dork: inurl:opaccss Date: 25-12-2014 Exploit Author: XD4rker Ismail Belkacim Email: xd4rkeratgmail.com Twitter: @xd4rker Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files...
PMB 4.1.3 Post-Auth SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: PMB = 4.1.3 Post-Auth SQL Injection Vulnerability Google Dork: inurl:opaccss Date: 25-12-2014 Exploit Author: XD4rker Ismail Belkacim Email: xd4rkeratgmail.com Twitter: @xd4rker Vendor Homepage: http://www.sigb.net Software Link...
汇文图书管理系统SQL注入
简要描述： 大量高校在使用该系统，测试了多个版本，都存在同样的问题。 详细说明： 看了下你们用户列表中的高校，基本上都用的是4.5或5.0版本的，都有同样的问题，找回密码处存在注入。 1 OPAC V4.5 测试站点：http://210.27.80.82/reader/redrmail.php 'or '1’=’1 时 和 ‘or ‘1’=’2 时返回不同，此处明显是存在注入的，是布尔型盲注。 拿出sqlmap跑跑，居然告诉我不能注入，不科学啊。反复修改参数试了几次，还是只能时间盲注，看来有时候神器也不好使。时间盲注就时间盲注吧，也比我自己动手快，尝试跑了下数据。 Sqlmap -r...
PMB Services <= 3.4.3 - SQL Injection Vunerability
No description provided by source. 888 888 888 888 888 888 888 888 888 888 888 888 .d8888b 88888b. 8888b. .d88888 .d88b. 888d888 888 888 888 d88P 888 88b 88b d88 888 d8888b 888P 888 888 888 888 888 888 .d888888 888 888 888 888 888 888 Y88b 888 Y88b. 888 888 888 888 Y88b 888 Y88..88P 888 88888888...
LibLime Koha 4.2 - Local File Inclusion
LibLime Koha 4.2 - Local File Inclusion Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team www.vigasis.com 0-Day...
LibLime Koha 4.2 - Local File Inclusion
Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team www.vigasis.com 0-Day Exploit Akin Tosunlar Special Thanks to Ozg...
LibLime Koha <= 4.2 Local File Inclusion Vulnerability
Exploit for cgi platform in category web applications Exploit Title: Koha Opac Local File Inclusion Google Dork: inurl:koha/opac-main.pl Date: 17.11.2011 Author: Akin TosunlarVigasis Labs Software Link: www.koha.org Version: 4.2 Tested on: LinuxApache 2.2.14 CVE : Vigasis Pentest Team...
PMB Services <= 3.4.3 SQL Injection Vunerability
Exploit for php platform in category web applications ---------------------------------------------------------------------------- Exploit Title: PMB Services = 3.4.3 Remote SQL Injection Author : Luchador Date : 29-01-2011 Location : Algeria Site : http://vbspiders.com Critical Lvl : Dangerous...
PMB Services 3.4.3 SQL Injection
888 888 888 888 888 888 888 888 888 888 888 888 .d8888b 88888b. 8888b. .d88888 .d88b. 888d888 888 888 888 d88P" 888 "88b "88b d88" 888 d88""88b 888P" 888 888 888 888 888 888 .d888888 888 888 888 888 888 888 Y88b 888 Y88b. 888 888 888 888 Y88b 888 Y88..88P 888 88888888 "Y88888 "Y8888P 888 888...
[Full-disclosure] OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities
Security Advisory - - OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities - ---------------------------------------------------- Product: OpenBiblio Version: Version 0.5.2 Prerelease 4 and prior is affected Url: http://obiblio.sourceforge.net/ Affected by: Full path disclosure, local file...
Unfixed XSS vulnerability at www.kommun-biblioteket.vilhelmina.com
Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.kommun-biblioteket.vilhelmina.com, which at the time of submission ranked 6652756 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Unfixed XSS vulnerability at www.sala.se
Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.sala.se, which at the time of submission ranked 2242199 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is currently...
adv68-K-159-2007.txt
----------------------------------------------------------------------------------------- ECHOADV68$2007 PMB Services = 3.0.13 Multiple Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni Date :...
[ECHO_ADV_68$2007] PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV68$2007 ----------------------------------------------------------------------------------------- ECHOADV68$2007 PMB Services = 3.0.13 Multiple Remote File Inclusion Vulnerability...