Silverstripe CMS Cross Site Scripting

|| | | | \ | | / / \ / / | | / \ / | | \ \ / | \ / |\ \ \ /| | | | | | \ |/ | Y Y \ \ / // | / \ \ / |//|| / /|| / /\ | / /|| / / / / / / / silverstripe CMS persisten XSS vulnerabilties vendor: http://demo.silverstripe.org Author: Karthik R 3psil0nLambDa Email:...

Acolyte CMS v1.5 and v6.3 - SQL Injection Vulnerabilities

Document Title: =============== Acolyte CMS v1.5 and v6.3 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=397 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities

Document Title: =============== Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=392 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Discuz 4.0 头像设置处可以持久型脚本

简要描述： Discuz 4.0 头像设置处可以post xss脚本， 可能是个老漏洞了，在内网的论坛上发现的，不知道是否没升级…… 详细说明： Discuz 4.0 头像设置处，先选一个系统自带头像，提交，抓包。 将头像地址【customavatars/190.jpg】替换为xss脚本【javascript:alert/x/】,post提交后，所有头像引用代码辩位;可以成功执行。 不过引号、，等会被替换或编码，必须构造无引号的语句 漏洞证明：...

WebCalendar -- Persistent XSS

tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS...

Multiple new vulnerabilities in Register Plus Redux for WordPress

Hello 3APA3A! I want to warn you about multiple new vulnerabilities in plugin Register Plus Redux for WordPress. Last version of the plugin was checked. These are Cross-Site Scripting, SQL Injection, Code Execution and Full path disclosure vulnerabilities. ------------------------- Affected...

CS и XSS уязвимости в Zeema CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Content Spoofing и Cross-Site Scripting уязвимостях в системе Zeema CMS. Это украинская коммерческая CMS. Content Spoofing WASC-12: В связи с возможностью прямого обращения к скрипту http://site/counter/counter.php с подделкой параметра ref и...

Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus

Vulnerability ID: VRPTH-2011-001 Reference: http://jameswebb.me/vulns/vrpth-2011-001.txt Vulnerability Summary ====================== Non-persistent XSS in Zoho ManageEngine ADSelfService Plus Test Environment ================= Windows 2008RC2 fully patched. ManageEngine ADSelfServicePlus version...

Strictly social XSS уязвимость в WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в WordPress. Которую я нашёл ещё 15.10.2008 и к которой уязвимы все версии WordPress. В WordPress имеет место Cross-Site Scripting уязвимость, в данном случае Strictly social XSS http://websecurity.com.ua/5469/, на...

Persistent XSS Vulnerability in White House Website

Persistent XSS Vulnerability in White House Website Alexander Fuchs, A German Security Researcher Discover Persistent XSS Vulnerability in Official website of White House. He said "The petition system is vulnerable. Every Petition i start or join will execute my code. I could join all petitions a...

Persistent XSS Vulnerability in White House Website

Persistent XSS Vulnerability in White House Website Alexander Fuchs, A German Security Researcher Discover Persistent XSS Vulnerability in Official website of White House. He said "The petition system is vulnerable. Every Petition i start or join will execute my code. I could join all petitions a...

Joomla! Component HM Community - Multiple Vulnerabilities

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Compenent comhmcommunity Multiple Vulnerabilities + Software : Joomla + Download : http://joomlaextensions.co.in/product/HM-Community + Author :...

Joomla! Component HM Community - Multiple Vulnerabilities

Joomla! Component HM Community - Multiple Vulnerabilities 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Compenent comhmcommunity Multiple Vulnerabilities + Software : Joomla + Download :...

Joomla HM-Community (com_hmcommunity) Multiple Vulnerabilities

No description provided by source. + Joomla Compenent comhmcommunity Multiple Vulnerabilities + Software : Joomla + Download : http://joomlaextensions.co.in/product/HM-Community + Author : 599eme Man + Contact : [email protected]...

Joomla HM Community SQL Injection / Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Compenent comhmcommunity Multiple Vulnerabilities + Software : Joomla + Download : http://joomlaextensions.co.in/product/HM-Community + Author :...

Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities

Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 01-Oct-2011 Vendor Notification Date. Never Product. Barter Sites Platform. Joomla Affected versions. 1.3 Type...

Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities

Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 01-Oct-2011 Vendor Notification Date. Never Product. Barter Sites Platform. Joomla Affected versions. 1.3 Type. Commercial Price. $99 Attack Vector. Sql Injection & Persisten...

Joomla HM-Community (com_hmcommunity) Multiple Vulnerabilities

Exploit for php platform in category web applications 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Joomla Compenent comhmcommunity Multiple Vulnerabilities + Software : Joomla + Download :...

Barter Sites 1.3 Joomla Component Multiple Vulnerabilities

Exploit for php platform in category web applications Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 01-Oct-2011 Vendor Notification Date. Never Product. Barter Sites Platform. Joomla Affected versions. 1.3 Type. Commerci...

OCS Inventory NG 2.0.1 Persistent XSS (CVE-2011-4024)

OCS Inventory NG 2.0.1 Persistent XSS CVE-2011-4024 ------------------------------------------------------- Software : Open Computer and Software OCS Inventory NG Download : http://www.ocsinventory-ng.org/ Discovered by : Nicolas DEROUET nicolas.derouetgmailcom Discover : 2011-10-04...