20 matches found
EUVD-2005-0408
Malware in sbrugna...
EUVD-2012-1042
Malware in sbrugna...
openconf.com XSS vulnerability
Open Bug Bounty ID: OBB-461571 Description| Value ---|--- Affected Website:| openconf.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
OpenConf 5.30 - Multi-Step Remote Command Execution
RIPS Analysis An early prototype of RIPS detected the issues described in the following in roughly 24,000 lines of code. OpenConf suffered mainly from a few SQL injection vulnerabilities, as well as reflected and persistent cross-site scripting issues. In the following, we focus on the combinatio...
OpenConf <= 4.11 (author/edit.php) Remote Blind SQL Injection Exploit
No description provided by source. ?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio Romano aka EgiX...
OpenConf SQL Injection
OpenConf SQL injection author/edit.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Openconf <=4.11 /author/edit.php SQL注入漏洞
No description provided by source...
[CVE-2012-1002] OpenConf <= 4.11 (author/edit.php) Blind SQL Injection Vulnerability
-------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Blind SQL Injection Vulnerability -------------------------------------------------------------------- author...............: Egidio Romano aka EgiX mail.................: n0b0d13satgmaildotcom...
OpenConf 4.11 Blind SQL Injection
?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio Romano aka EgiX mail.................:...
OpenConf 4.11 - authoredit.php Blind SQL Injection
OpenConf 4.11 - authoredit.php Blind SQL Injection ?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio...
OpenConf 4.11 - '/author/edit.php' Blind SQL Injection
?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio Romano aka EgiX mail.................:...
OpenConf <= 4.11 (author/edit.php) Remote Blind SQL Injection Exploit
Exploit for php platform in category web applications ?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio...
CVE-2012-1002
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
Sql injection
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2012-1002
SQL injection vulnerability in author/edit.php in OpenConf 4.x before 4.12 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2012-1002
OpenConf software (OpenConf
CVE-2005-0407
Cross-site scripting XSS vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title...
CVE-2005-0407
CVE-2005-0407 is a cross-site scripting vulnerability in Openconf 1.04 (and possibly earlier versions prior to 1.10). Attackers can inject arbitrary HTML/JavaScript via the paper title, which can be executed when an admin reviews submissions, enabling potential session takeover or script executio...
CVE-2005-0407
Cross-site scripting XSS vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title...
[Full-Disclosure] Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software
Advisory: Cross Site Scripting Vulnerability in Openconf Conference Management Software A group of students at our lab called RedTeam found a cross site scripting vulnerability in openconf which results in possible session takeover. Details ======= Product: openconf Affected Version: 1.04, probab...