vbultop-xss.txt

+-------------------------------------------------------------------- + + New post Topic Hijacking XSS All vBulletin® v 3.x.x + +-------------------------------------------------------------------- + vendor site........: http://www.vbulletin.com/ + Affected Software .: vbulletin + Class...

vbulletin < 3.6.6 [permanent xss]

vendor site:http://www.vbulletin.com/ product:vbulletin 3.6.6 bug: permanent xss affected file: calendar.php risk : medium xss permanent must be loggued PoC : http://127.0.0.1/vbulletin/calendar.php?do=add&type=single&c=1 -- fill up the title field with : /titlescriptalertdocument.cookie/script...

vbul366-xss.txt

vendor site:http://www.vbulletin.com/ product:vbulletin fill up the title field with : alertdocument.cookie Event Date : some far away date ... like 2010 for exemple message : whatever . when it's done look at the :"Request Reminder for this Event" link. it looks like this:...

vikiboard012.txt

vendor site:http://vikingboard.com/ product:Vikingboard 0.1.2 bug:local file include & multiples permanent xss risk:medium error sql : /members.php?s=-80 xss permanent : - in private message , an attacker can send a pm to an administrator with some javascript into the subject field an get his...

Vikingboard (0.1.2) [ multiples vulnerability ]

vendor site:http://vikingboard.com/ product:Vikingboard 0.1.2 bug:local file include & multiples permanent xss risk:medium error sql : /members.php?s=-80 xss permanent : - in private message , an attacker can send a pm to an administrator with some javascript into the subject field an get his...

phpmyadmin.txt

vendor site:http://phpmyadmin.net/ product:PhpMyAdmin all version bug: xss permanent & full path disclosure global risk:high xss post : 1 create a table , with whatever name , when it's done , go to "operation" /dboperations.php and add a comment on your table with: '"alertdocument.cookie the...

[Full-disclosure] KorviBlog - XSS permanent !

Produit : KorviBlog - Langage : PHP - Site web officiel : http://korvi.jdhosts.net/ - Page vulnerable : livreor.php - Faille de securite : Cross Site Scripting Permanent - Explications : Ligne 4 : livreor$POST'prenom', $POST'emailFrom', $POST'body', time; Les variables $POST'prenom' ,...

SuSE Linux Kernel非授权操作SCS设备固件漏洞

BUGTRAQ ID: 11784 CVECAN ID: CVE-2004-1190 SuSE Linux是一款开放源代码Linux系统。 SuSE Linux对SCSI设备接口的管理存在漏洞，本地攻击者可能利用此漏洞非授权修改破坏设备的固件。 SuSE Linux可能允许本地攻击者覆盖小型计算机系统接口（SCSI）设备的固件。拥有只读访问权限的本地攻击者可以向SCSI设备发送SCSI命令覆盖固件，导致设备永久的不可恢复的失效，可能必须送回厂商才能修复。 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux 9.0 RedHat ------...

[Full-disclosure] Cisco PIX embryonic state machine 1b data DoS

Arhont Ltd - Information Security Arhont Advisory by: Konstantin V. Gavrilenko http://www.arhont.com http://www.hackingciscoexposed.com Arhont ref: arh200601-1 Advisory: Cisco PIX embryonic state machine 1b data DoS Class: design bug? Version: Tested on PIX535, PIX OS ver 6.34 Tested on PIX515E,...

[Full-disclosure] Free Web Stat Multiple XSS Vulnerabilities

FreeWebStat Multiple XSS Vulnerabilities Name Multiple XSS Vulnerabilities in FreeWebStat Systems Affected FreeWebStat verified on 1.0 rev37 Severity Medium Risk Vendor www.freewebstat.com Advisory http://www.ush.it/2005/11/25/free-web-stat/ Author Francesco "aScii" Ongaro ascii at katamail . com...

SMTP server accepts us

This script does not perform any security test. It verifies that OpenVAS that connect to the remote SMTP server and that it can send a HELO request. OpenVAS Vulnerability Test $Id: checksmtphelo.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SMTP server accepts us Authors: Michel Arboi...

Limbo CMS <=1.0.4.2 XSS

Limbo CMS =1.0.4.2 XSS 2005-10-03 12:37:28 bugtaq at lol dot lt Vulnerability type: Permanent XSS Risk: Moderate A malicious HTML tag can be injected through the Contact menu form. A PM can be send, which will later be red by admins. E.g.: scriptalertdocument.cookie/script Information was provide...

Web Wiz Forums ver. 7.01

Informations : °°°°°°°°°°°° Language : ASP Bugged Version : Web Wiz Forums ver. 7.01 and less ? Website : http://www.webwizforums.com Problems : Permanent XSS Objects : °°°°°°° - registernewuser.asp - register.asp The values variable are not filtered: strLocation = Request.Form"location" strMessa...

Web Wiz Forums ver. 7.01

Informations : °°°°°°°°°°°° Language : ASP Bugged Version : Web Wiz Forums ver. 7.01 and less ? Patched version : none Website : http://www.webwizforums.com Problems : Permanent XSS Objects : °°°°°°° - forummembers.asp - members.asp - pmbuddylist.asp Exploits : °°°°°°°°...

GuppY : XSS, Files Reading/Writing

Informations : °°°°°°°°°°°°° Language : PHP Bugged Version : 2.4p3 and less ? Patched version : 2.4p4 Website : http://www.freeguppy.org Problems : - Permanent XSS - Files Reading - Files Writing PHP Code/Location : °°°°°°°°°°°°°°°°°°° postguest.php :...

PT-1997-1154 · Microsoft · Windows Nt

Name of the Vulnerable Software and Affected Versions: Windows NT affected versions not specified Description: The issue concerns a Windows NT user having inappropriate rights or privileges. This includes privileges such as Act as System, Add Workstation, Backup, Change System Time, Create...

Windows SharePoint Services 3.0 Service Pack 3 (KB2526305)

Windows SharePoint Services 3.0 Service Pack 3 KB2526305 provides the latest updates to Windows SharePoint Services 3.0. After you install this item, you may have to restart your computer. After you have installed this item, it cannot be removed...