Hexjector 1.0.7.2 - Persistent Cross-Site Scripting

Exploit Title: Hexjector Persistent XSS ".""; $url2 is not filtered so XSS codes can be executed. You would need to find a site that is vulnerable either to XSS or SQL Injection to generate this vulnerability.A site that is vulnerable to XSS only will also work because my Hexjector will not stop...

Hexjector 1.0.7.2 - Persistent Cross-Site Scripting

Hexjector 1.0.7.2 - Persistent Cross-Site Scripting Exploit Title: Hexjector Persistent XSS ".""; $url2 is not filtered so XSS codes can be executed. You would need to find a site that is vulnerable either to XSS or SQL Injection to generate this vulnerability.A site that is vulnerable to XSS onl...

DataTrack System 3.5 Cross Site Scripting

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Privacy — Handling Cookies

US-CERT recommends that you select the Advanced button and select Override automatic cookie handling. Then select Prompt for both first and third-party cookies. This will prompt you each time a site tries to place a cookie on your machine. If the number of cookie prompts is too excessive, the...

Project Forum 6.5.2.2978 Cross Site Request Forgery / Cross Site Scripting

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

IP.Board (IPB) 3.0.x Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================= IP.Board IPB 3.0.x Persistent XSS Vulnerability ================================================= Date: 05/14/2010 Author: Cryptovirus Software Link: http://community.invisionpower.com/ Version...

pmwiki: persistent cross site scripting (XSS), CVE-2010-1481

pmwiki: persistent cross site scripting XSS, CVE-2010-1481 References https://vulners.com/cve/CVE-2010-1481 http://int21.de/cve/CVE-2010-1481-pmwiki-xss.html Description The table feature of pmwiki is vulnerable to persistent cross site scripting XSS. The value of the width-parameter is not...

Joomla Component com_frontpage Persistent XSS Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comfrontpage Persistent XSS Vulnerability =========================================================== +Title Joomla Component comfrontpage Persistent XSS Vulnerabilit...

Tumblr.com Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Friendster.com Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

DBHcms 1.1.4 - Persistent Cross-Site Scripting

DBHcms 1.1.4 - Persistent Cross-Site Scripting Title: DBHcms 1.1.4 Stored XSS Vendor: http://www.drbenhur.com Dork: "powered by DBHcms" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

DBHcms 1.1.4 - Persistent Cross-Site Scripting

Title: DBHcms 1.1.4 Stored XSS Vendor: http://www.drbenhur.com Dork: "powered by DBHcms" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability50.htm Thanks: r3dm0v3...

Discuz!NT 3.1.0 多处持久性跨站漏洞

Discuz!NT，是康盛创想北京科技有限公司旗下的一款功能强大的基于 ASP.net 平台的社区软件，包括论坛、Space 个人空 间、相册、聚合等功能，后台自由选择开启。 1.论坛相册空间日志发表评论，插入跨站语句即可： demo:http://nt.discuz.net/showphoto.aspx?photoid=42 2. 在论坛板块版面出随意选择一种浏览方式，然后修改或添加加入跨站语句，获得地址：...

New-CMS - Multiple Vulnerabilities

New-CMS - Multiple Vulnerabilities Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com...

osCommerce 3.0a5 Cross Site Request Forgery / Cross Site Scripting / Local File Inclusion

Multiple Vulnerabilities in osCommerce Vendor SW: osCommerce Version: 3.0a5 but possible all versions Vendor URL: www.oscommerce.com Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 30 Apr 2010 Author: Alberto Fontanella Author WEB: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it...

ASPCode CMS 1.5.8 - Multiple Vulnerabilities

Multiple Vulnerability in ASPCode CMS Software Version: yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS"; http://host/default.asp?sec=1&ma2="alert"XSS"; XSS found also on Form to reset...

New-CMS - Multiple Vulnerabilities

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

ASPCode CMS <= v1.5.8 Multiple Vulnerabilities

Exploit for asp platform in category web applications ============================================== ASPCode CMS yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS";...

ASPCode CMS 1.5.8 - Multiple Vulnerabilities

ASPCode CMS 1.5.8 - Multiple Vulnerabilities Multiple Vulnerability in ASPCode CMS Software Version: yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS";...

osCommerce v3.0a5 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================== osCommerce v3.0a5 Multiple Vulnerabilities ========================================== Vendor SW: osCommerce Version: 3.0a5 but possible all versions Vendor URL: www.oscommerce.com Tested on: Ubuntu...