Fire Soft Board <= 2.0.1 Persistent XSS Vulnerability (admin panel)

No description provided by source. Exploit Title: Fire Soft Board = 2.0.1 Persistent XSS Vulnerability admin panel Date: 2011-07-11 Author: jill for A-S Software Link: http://www.fire-soft-board.com/index.php?p=download&mode=cat&id=2 Version: 2.0.1 There is a vulnerability on Fire Soft Board foru...

AJ Article Persistent XSS Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r0073r...

ILIAS 4.4.1 - Multiple Vulnerabilities

No description provided by source. ============================================================== Title ...| Multiple vulnerabilities in ILIAS Version .| ilias-4.4.1.zip Date ....| 21.02.2014 Found ...| HauntIT Blog Home ....| www.ilias.de...

Wordpress FuneralPress Plugin 1.1.6 - Persistent XSS

No description provided by source. WP FuneralPress - stored xss in guestbook FuneralPress is an online website obituary management and guest book program for funeral homes and cemeteries http://wpfuneralpress.com/ tested on: funeralpress version 1.1.6 / wordpress version 3.5.1 impact: malicious...

TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities

TP-LINK TL-WR841N / TL-WR841ND are vulnerable to many CSRF and XSS attacks because of no CSRF prevention technique and poor parameters filtration. Attacker is able to compromise router and steal config & log files. Title: TP-LINK Model No. TL-WR841N / TL-WR841ND - Multiple Vulnerabilities Date:...

ECSHOP the presence of a persistent XSS risk-vulnerability warning-the black bar safety net

ECSHOP some places thereXSSthe risk,can get admin cookies. ECSHOP filter do well,but the hundred Secret one sparse..... First,feel free to purchase merchandise, the purchase information,the recipient address or the recipient address is writtenXSScode,orders submitted after the background check...

D-link DSL-2760U-E1 - Persistent XSS Vulnerability

Exploit for hardware platform in category web applications !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname...

D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting

D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting !/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname. Checks ...

Lunar CMS 3.3 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

CSRF Add Admin =============== input type="hid...

D-Link DSL-2760U-E1 - Persistent Cross-Site Scripting

!/bin/bash Written and discovered by Yuval tisf Nativ The page 'dhcpinfo.html' will list all machines connected to the network with hostname, IP, MAC and IP expiration. It is possible to store an XSS in this table by changing hostname. Checks if you are root if "$id -u" != "0" ; then echo "Please...

Secunia.com CSI/VIM - Persistent Validation Vulnerabilities

Document Title: =============== Secunia.com CSI/VIM - Persistent Validation Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1272 Article:...

Paypal Bug Bounty #36 - SecurityKey Card Vulnerability

Document Title: =============== Paypal Bug Bounty 36 - SecurityKey Card Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=834 Release Date: ============= 2014-06-17 Vulnerability Laboratory ID VL-ID: ==================================== 834...

eFront 3.6.14.4 - surname Persistent Cross-Site Scripting

eFront 3.6.14.4 - surname Persistent Cross-Site Scripting ​ Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link:...

eFront 3.6.14.4 (surname param) - Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link:...

eFront 3.6.14.4 Cross Site Scripting

​ Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link: https://sourceforge.net/projects/efrontlearning/files/latest/download Version: 3.6.14.4 Tested on:...

eFront 3.6.14.4 - &#039;surname&#039; Persistent Cross-Site Scripting

​ Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link: https://sourceforge.net/projects/efrontlearning/files/latest/download Version: 3.6.14.4 Tested on:...

IPSwitch IMail Server WEB client 12.4 persistent XSS

Exploit for windows platform in category web applications Exploit Title: IPSwitch IMail Server WEB client 12.4 persistent XSS Google Dork: Date: 3 june 2014 Exploit Author: Peru GoSecure! Vendor Homepage: www.ipswitch.com Software Link: http://www.imailserver.com/try/ Version: Tested on 12.3 and...

Madness Pro 1.14 - Persistent Cross-Site Scripting

Madness Pro 1.14 - Persistent Cross-Site Scripting !/usr/bin/env python2 -- coding: utf-8 -- Exploit Title: Madness Pro %3C%2Fscript%3E%3...

Madness Pro <= 1.14 Persistent XSS / SQL InjectionVulnerabilities

Exploit for php platform in category web applications !/usr/bin/env python2 -- coding: utf-8 -- Exploit Title: Madness Pro = 1.14 Persistent XSS Date: June 05, 2014 Exploit Author: @botnethunter Version: 1.14 Tested on: Apache2 - Ubuntu - MySQL ▄▄▌ ▄▄▄▄· ▄▄▄▄▄ • ▌ ▄ ·. ▄· ▄▌ ██• ▪ ▐█ ▀█▪▪ •██ ▪ ·...

Madness Pro 1.14 - Persistent Cross-Site Scripting

!/usr/bin/env python2 -- coding: utf-8 -- Exploit Title: Madness Pro %3C%2Fscript%3E%3C%2Fa%3E"...