CGI Generic XSS (persistent)

The remote web server hosts one or more CGI scripts that fail to adequately sanitize request strings containing malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the...

Achievo < 1.4.0 Multiple Vulnerabilities

Binary data 5208.prm...

Achievo Cross Site Scripting

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Achievo 1. Advisory Information Title: Multiple XSS in Achievo Advisory ID: BONSAI-2009-0101 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/achievo-multiple-xss-0101.txt Date published:...

[BONSAI] XSS in Achievo - Customized XSS payload included

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ Multiple XSS in Achievo 1. Advisory Information Title: Multiple XSS in Achievo Advisory ID: BONSAI-2009-0101 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/achievo-multiple-xss-0101.txt Date published:...

XSS and Content Spoofing vulnerabilities in CKEditor

Hello 3APA3A! I want to warn you about Cross-Site Scripting and Content Spoofing vulnerabilities in CKEditor. XSS: This is Persistent XSS vulnerability. Attack is conducting via placing link with setting the style. a href="http://test"...

XSS and Content Spoofing vulnerabilities in FCKeditor

Hello 3APA3A! I want to warn you about Cross-Site Scripting and Content Spoofing vulnerabilities in FCKeditor. XSS: This is Persistent XSS vulnerability. Attack is conducting via placing link with setting the style. a href="http://test" style="-moz-binding:url'http://site/xss.xmlxss'"test/a This...

WX Guestbook 1.1.208 - SQL Injection Persistent Cross-Site Scripting

WX Guestbook 1.1.208 - SQL Injection Persistent Cross-Site Scripting WX Guest Book 1.1.208 Vulns By learn3r hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: www.webilix.com This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vu...

WX Guestbook 1.1.208 - SQL Injection / Persistent Cross-Site Scripting

WX Guest Book 1.1.208 Vulns By learn3r hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: www.webilix.com This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vuln The search parameters/queries we submit to the search.php are...

WX Guest Book 1.1.208 SQL Injection / XSS

WX Guest Book 1.1.208 Vulns By learn3r hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: www.webilix.com This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vuln The search parameters/queries we submit to the search.php are...

WX Guest Book 1.1.208 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== WX Guest Book 1.1.208 SQL/XSS Multiple Remote Vulnerabilities =============================================================== WX Guest Book 1.1.208 Vulns By learn3r hacker fro...

WX Guestbook 1.1.208 SQLi and persistent XSS

No description provided by source. WX Guest Book 1.1.208 Vulns By learn3r hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: www.webilix.com This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vuln The search parameters/queries w...

Neufbox Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Kim, Neocoderz, Syltrox66, Sheiry, Shimik Root...

Neufbox NB4-R1.5.10-MAIN Persistent XSS Vulnerability

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Kim,...

Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Kim, Neocoderz, Syltrox66, Sheiry, Shimik Root...

Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting

Neufbox NB4-R1.5.10-MAIN - Persistent Cross-Site Scripting 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man + Contact : [email protected] +...

Neufbox NB4-R1.5.10-MAIN Persistent XSS Vulnerability

Exploit for hardware platform in category remote exploits ===================================================== Neufbox NB4-R1.5.10-MAIN Persistent XSS Vulnerability ===================================================== + Neufbox NB4-R1.5.10-MAIN Persistent XSS + Author : 599eme Man...

Kayako SupportSuite Ticket Subject XSS

According to its banner, the version of Kayako SupportSuite installed on the remote host is earlier than 3.60.04. Such versions are affected by a persistent cross-site scripting vulnerability. Specifically, the installed version fails to sanitize input passed to the subject field while creating a...

Kayako SupportSuite 3.50.06 XSS

nGenuity Information Services – Security Advisory Advisory ID: NGENUITY-2009-008 - Ticket Subject Persistent XSS in Kayako SupportSuite Application: SupportSuite v3.50.06 Vendor: Kayako Vendor website: http://www.kayako.com Author: Adam Baldwin [email protected] Class: Persistent...

[NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite

nGenuity Information Services – Security Advisory Advisory ID: NGENUITY-2009-008 - Ticket Subject Persistent XSS in Kayako SupportSuite Application: SupportSuite v3.50.06 Vendor: Kayako Vendor website: http://www.kayako.com Author: Adam Baldwin [email protected] Class: Persistent...

Multi Website 1.5 Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Multi Website 1.5 Search Remote XSS Vulnerability + Software : Multi Website 1.5 + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi,...