WordPress Plugin RSVPMaker 2.5.4 - Persistent Cross-Site Scripting

WordPress Plugin RSVPMaker 2.5.4 - Persistent Cross-Site Scripting Exploit Title: WordPress RSVPMaker v2.5.4 Persistent XSS Date: 8/12/12 Exploit Author: Chris Kellum Vendor Homepage: http://rsvpmaker.com/ Software Link: http://downloads.wordpress.org/plugin/rsvpmaker.zip Version: 2.5.4...

Social Engine 4 Persistent XSS & Non-Persistent XSS

===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :------------------------------------------------------------------------------------------ ---------------------------------------------...

WordPress RSVPMaker v2.5.4 Persistent XSS

Exploit for php platform in category web applications Exploit Title: WordPress RSVPMaker v2.5.4 Persistent XSS Date: 8/12/12 Exploit Author: Chris Kellum Vendor Homepage: http://rsvpmaker.com/ Software Link: http://downloads.wordpress.org/plugin/rsvpmaker.zip Version: 2.5.4 =====================...

Inout Mobile Webmail APP - Multiple Web Vulnerabilities

Title: ====== Inout Mobile Webmail APP - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=609 VL-ID: ===== 609 Common Vulnerability Scoring System: ==================================== 3.5 Abstract: ========= The...

WordPress Plugin RSVPMaker 2.5.4 - Persistent Cross-Site Scripting

Exploit Title: WordPress RSVPMaker v2.5.4 Persistent XSS Date: 8/12/12 Exploit Author: Chris Kellum Vendor Homepage: http://rsvpmaker.com/ Software Link: http://downloads.wordpress.org/plugin/rsvpmaker.zip Version: 2.5.4 ===================== Vulnerability Details ===================== The RSVP...

SonicWall UTM ES WAF - Input Filter Bypass Vulnerability

Document Title: =============== SonicWall UTM ES WAF - Input Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=545 Release Date: ============= 2012-08-12 Vulnerability Laboratory ID VL-ID: ==================================== 54...

SonicWall UTM ES WAF - Input Filter Bypass Vulnerability

Document Title: =============== SonicWall UTM ES WAF - Input Filter Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=545 Release Date: ============= 2012-08-12 Vulnerability Laboratory ID VL-ID: ==================================== 54...

Social Engine 4.2.5 Cross Site Scripting

Exploit for php platform in category web applications Social Engine 4.2.5 Cross Site Scripting Details: ======== 1.1 Multiple persistent input validation vulnerabilities are detected in the Social Engine v4.2.5 web application. The bug allows an attackers to implement/inject malicious script code...

Nike+ Panel / Mobile App Cross Site Scripting

Exploit for php platform in category web applications Nike+ Panel & Mobile App - Multiple Web Vulnerabilities Details: ======== Multiple persistent input validation vulnerabilities are detected in the Nike+ Control Panel & fuelband mobile web application. The bug allows an attackers to...

Flynax General Classifieds CMS 4.0 - Multiple Vulnerabilities

Title: ====== Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities Date: ===== 2012-07-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=659 VL-ID: ===== 659 Common Vulnerability Scoring System: ==================================== 8.3 Introduction:...

Poll Finds Security Practitioners Falsely Believe They're Protected Against APTs

If a recent poll of 1,000 security professionals is any indication, there remains a significant learning gap in understanding advanced persistent threats – and therefore building a strong defense to resist them. The survey conducted by FireEye’s Malware Intelligence Lab showed nearly 60 percent o...

Persistent xss flaw in the revision history (of comments).

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Cloud. Using Confluence Server? See the corresponding bug report|http://jira.atlassian.com/browse/CONFSERVER-47387. panel Whilst a comment is html encoded /sanitized when displayed within an answer to a question the revision history pag...

persistent xss vulnerability through uploaded files in IE8/9

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-46953. panel It is possible to upload a number of file types checked by extension to an answers instance and then download them...

emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting

emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: EmailArchitect Enterprise Email Server Version: 10.0 Vendor Site: http://www.emailarchitect.net Software Download Link:...

winwebmail server 3.8.1.6 - Persistent Cross-Site Scripting

winwebmail server 3.8.1.6 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: WinWebMail Server Version: 3.8.1.6 Vendor Site: http://www.winwebmail.net Software Download: http://www.winwebmail.net/email-server-download.html Timeline: 29 May 201...

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May...

escon supportportal pro 3.0 - Persistent Cross-Site Scripting

escon supportportal pro 3.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ESCON SupportPortal Pro Version: 3.0 Vendor Site: http://www.e-supportportal.com Software Download: http://www.e-supportportal.com/download.html Timeline: 29 May...

WordPress Plugin mini mail Dashboard widget 1.42 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT with...

iauto mobile Application 2012 - Multiple Vulnerabilities

iauto mobile Application 2012 - Multiple Vulnerabilities Title: ====== iAuto Mobile Application 2012 - Multiple Web Vulnerabilities Date: ===== 2012-07-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=658 VL-ID: ===== 658 Common Vulnerability Scoring System:...

Inout Mobile Webmail APP - Persistent Cross-Site Scripting

Inout Mobile Webmail APP - Persistent Cross-Site Scripting Title: ====== Inout Mobile Webmail APP - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=609 VL-ID: ===== 609 Common Vulnerability Scoring System:...