Plandora Cross Site Scripting

Exploit Title: Plandora Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://plandora.org/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/plandora-cross-site-scripting.html...

Mibew messenger multiple XSS

Advisory ID: CSA-12001 Title: Mibew messenger multiple XSS Product: mibew messenger Version: 1.6.4 and probably prior Vendor: mibew.org Vulnerability type: XSS Vendor notification: 2012-01-07 Public disclosure: 2012-01-24 Mibew messenger version 1.6.4 an probably below is vulnerable to multiple X...

FreeBSD : WebCalendar -- Persistent XSS (2b20fd5f-552e-11e1-9fb7-003067b2972c)

tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine a...

OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities

Title: ====== OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=426 VL-ID: ===== 426 Introduction: ============= Onxshop is not only great CMS offering integrated in-context editing and full design...

OnxShop CMS 1.5.0 Cross Site Scripting

Title: ====== OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=426 VL-ID: ===== 426 Introduction: ============= Onxshop is not only great CMS offering integrated in-context editing and full design...

eFront Community++ 3.6.10 Cross Site Scripting

Title: ====== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities Date: ===== 2012-02-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=421 VL-ID: ===== 421 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutio...

Yoono Desktop 1.8.16 Cross Site Scripting

TITLE: Yoono Desktop Application Persistent XSS vendor: Yoono Version: 1.8.16 Impact: Persistent XSS Software Link: available in yoono site Author: r007k17-w Email: [email protected] Twitter: http://twitter.com/!/r007k17w My blog: http://shadowrootkit.wordpress.com/...

Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities

Document Title: =============== Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=430 Release Date: ============= 2012-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 43...

Yoono Firefox 7.7.0 Cross Site Scripting

TITLE: Yoono firefox addon Persistent XSS vendor: Yoono Version: 7.7.0 Impact: Persistent XSS Software Link: https://addons.mozilla.org/en-US/firefox/addon/yoono-twitter-facebook-linkedi/ Author: r007k17-w Email: [email protected] Twitter: http://twitter.com/!/r007k17w My blog:...

Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities

Document Title: =============== Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=430 Release Date: ============= 2012-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 43...

eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Apache Struts < 2.3.3 Showcase Multiple Persistent XSS Vulnerabilities

Apache Struts Showcase is prone to multiple persistent cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CLiki Cross Site Scripting

Exploit Title: CLiki Cross Site Scripting Date: 8.02.2012 Author: Sony Software Link: http://www.cliki.net Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/cliki-cross-site-scripting.html...

eFront Community++ v3.6.10 - Cross Site Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...

OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities

Document Title: =============== OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=426 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 426 Produ...

Dinama SMS Service - Persistent Web Vulnerability

Document Title: =============== Dinama SMS Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=417 Release Date: ============= 2012-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 417 Produ...

Dinama SMS Service - Persistent Web Vulnerability

Document Title: =============== Dinama SMS Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=417 Release Date: ============= 2012-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 417 Produ...

OSCommerce 3.0.2 Cross Site Scripting

Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the GNU General Public License. It features a rich set o...

Apache Struts 1.3.10 / 2.0.14 / 2.2.3 Cross Site Scripting

Title : Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://struts.apache.org/ Advisory : http://secpod.org/blog/?p=450 http://secpod.org/advisories/SecPodApacheStrutsMultipleParsistantXSSVulns.txt Software...