Conduit Mobile Cross Site Scripting

TITLE: Conduit MOBILE PERSISTENT XSS vendor: Conduit Author: r007k17-w Email: [email protected] TWITTER: http://twitter.com/r007k17w My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...

Jamroom Cross Site Scripting

Exploit Title: Jamroom Cross Site Scripting Date: 19.02.2012 Author: Sony Software Link: http://www.jamroom.net Google Dorks: Powered by Jamroom Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/jamroom-cross-site-scripting.html...

Endian UTM Firewall 2.4.x Cross Site Scripting

Title: ====== Endian UTM Firewall v2.4.x - Cross Site Vulnerabilities Date: ===== 2012-02-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=436 VL-ID: ===== 436 Introduction: ============= The Endian Firewall is an open source GNU/Linux distribution that specializes on...

Jenkins Cross Site Scripting

Exploit Title: Jenkins Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://jenkins-ci.org/ Software Version: 1.408-1.451 maybe other.. Google Dorks : intext:jenkins ver. inurl:/jenkins site:edu or what you want. Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com...

PT-2020-12536

Name of the Vulnerable Software and Affected Versions Puma versions prior to 3.12.6 Puma versions prior to 4.3.5 Description A client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the clie...

Plandora Cross Site Scripting

Exploit Title: Plandora Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://plandora.org/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/plandora-cross-site-scripting.html...

FreeBSD : WebCalendar -- Persistent XSS (2b20fd5f-552e-11e1-9fb7-003067b2972c)

tom reports, There is no sanitation on the input of the location variable allowing for persistent XSS. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2018 Jacques Vidrine a...

Mibew messenger multiple XSS

Advisory ID: CSA-12001 Title: Mibew messenger multiple XSS Product: mibew messenger Version: 1.6.4 and probably prior Vendor: mibew.org Vulnerability type: XSS Vendor notification: 2012-01-07 Public disclosure: 2012-01-24 Mibew messenger version 1.6.4 an probably below is vulnerable to multiple X...

OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities

Title: ====== OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=426 VL-ID: ===== 426 Introduction: ============= Onxshop is not only great CMS offering integrated in-context editing and full design...

OnxShop CMS 1.5.0 Cross Site Scripting

Title: ====== OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities Date: ===== 2012-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=426 VL-ID: ===== 426 Introduction: ============= Onxshop is not only great CMS offering integrated in-context editing and full design...

Yoono Desktop 1.8.16 Cross Site Scripting

TITLE: Yoono Desktop Application Persistent XSS vendor: Yoono Version: 1.8.16 Impact: Persistent XSS Software Link: available in yoono site Author: r007k17-w Email: [email protected] Twitter: http://twitter.com/!/r007k17w My blog: http://shadowrootkit.wordpress.com/...

eFront Community++ 3.6.10 Cross Site Scripting

Title: ====== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities Date: ===== 2012-02-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=421 VL-ID: ===== 421 Introduction: ============= Tailored with larger organizations in mind, eFront Community ++ offers solutio...

Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities

Document Title: =============== Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=430 Release Date: ============= 2012-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 43...

Yoono Firefox 7.7.0 Cross Site Scripting

TITLE: Yoono firefox addon Persistent XSS vendor: Yoono Version: 7.7.0 Impact: Persistent XSS Software Link: https://addons.mozilla.org/en-US/firefox/addon/yoono-twitter-facebook-linkedi/ Author: r007k17-w Email: [email protected] Twitter: http://twitter.com/!/r007k17w My blog:...

Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities

Document Title: =============== Kloxo LxCenter CP v6.1.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=430 Release Date: ============= 2012-02-10 Vulnerability Laboratory ID VL-ID: ==================================== 43...

eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

CLiki Cross Site Scripting

Exploit Title: CLiki Cross Site Scripting Date: 8.02.2012 Author: Sony Software Link: http://www.cliki.net Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/cliki-cross-site-scripting.html...

Apache Struts < 2.3.3 Showcase Multiple Persistent XSS Vulnerabilities

Apache Struts Showcase is prone to multiple persistent cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

eFront Community++ v3.6.10 - Cross Site Vulnerability

Document Title: =============== eFront Community++ v3.6.10 - Cross Site Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=423 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 423...