osCommerce 3.0.2 - Persistent Cross-Site Scripting

Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the GNU General Public License. It features a rich set o...

SmartyCMS 0.9.4 Cross Site Scripting

TITLE: SmartyCMS 0.9.4 Template module Persistent XSS vendor: SmartyCMS Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: Copyright 2007 by SmartyCMS 0.9.4 built 334...

Sphinx Mobile Web Server <= 3.1.2.47 Multiple XSS Vulnerabilities - Active Check

Sphinx Mobile Web Server is prone to persistent cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Sphinix Mobile Web Server 3.1.2.47 Multiple Persistent XSS Vulnerabilities

Exploit for windows platform in category web applications Title : Sphinix Mobile Web Server Multiple Persistent XSS Vulnerabilities Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.sphinx-soft.com/MWS/index.html Advisory : http://secpod.org/blog/?p=453...

Apache Struts - Multiple Persistent Cross-Site Scripting Vulnerabilities

Title : Apache Struts Multiple Persistent Cross-Site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://struts.apache.org/ Advisory : http://secpod.org/blog/?p=450 http://secpod.org/advisories/SecPodApacheStrutsMultipleParsistantXSSVulns.txt Software...

TWiki Cross Site Scripting

Exploit Title: TWiki Cross Site Scripting Date: 31.01.2012 Author: Sony Software Link: http://www.twiki.org Google Dorks: intext:powered by twiki Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/cross-site-scripting-twiki.html...

PragmaMX 1.2.10 - Persistent Cross-Site Scripting

PragmaMX 1.2.10 - Persistent Cross-Site Scripting TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org...

PragmaMX 1.2.10 - Persistent Cross-Site Scripting

TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org ............................. VERSION . 1.12.0...

PragmaMX 1.2.10 Persistent XSS Vulnerability

Exploit for php platform in category web applications TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org...

PragmaMX 1.2.0 Persistent Cross Site Scripting

TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org ............................. VERSION . 1.12.0...

Achievo v1.4.3 - Multiple Web Vulnerabilities

Document Title: =============== Achievo v1.4.3 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=403 http://www.cnnvd.org.cn/vulnerability/show/cvid/2012020060 ID: CNNVD-201202-060 Release Date: ============= 2012-01-29...

Silverstripe CMS Cross Site Scripting

|| | | | \ | | / / \ / / | | / \ / | | \ \ / | \ / |\ \ \ /| | | | | | \ |/ | Y Y \ \ / // | / \ \ / |//|| / /|| / /\ | / /|| / / / / / / / silverstripe CMS persisten XSS vulnerabilties vendor: http://demo.silverstripe.org Author: Karthik R 3psil0nLambDa Email:...

Inquisiq R3 (LMS) - Multiple Persistent Vulnerabilities

Document Title: =============== Inquisiq R3 LMS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=317 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 317...

Inquisiq R3 (LMS) - Multiple Persistent Vulnerabilities

Document Title: =============== Inquisiq R3 LMS - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=317 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 317...

DeutschePost Website - Non Persistent Web Vulnerability

Document Title: =============== DeutschePost Website - Non Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=261 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 261...

Acolyte CMS 1.5 / 6.3 Cross Site Scripting / SQL Injection

Title: ====== Acolyte CMS v1.5 and v6.3 - SQL Injection Vulnerabilities Date: ===== 2012-01-25 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=397 VL-ID: ===== 397 Abstract: ========= A Vulnerability Laboratory researcher discovered a critical remote SQL Injection and a...

Acolyte CMS v1.5 and v6.3 - SQL Injection Vulnerabilities

Document Title: =============== Acolyte CMS v1.5 and v6.3 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=397 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 3...

WordPress <= 3.3.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Trustwave's SpiderLabs Security Advisory TWSL2012-002: Multiple Vulnerabilities in WordPress Published: 1/24/12 Version: 1.0 Vendor: WordPress http://wordpress.org/ Product: WordPress Version affected: 3.3.1 and prior Product description:...

Parallels H Sphere 3.3 P1 Cross Site Scripting

Title: ====== Parallels H Sphere v3.3 P1 - Multiple Persistent Vulnerabilities Date: ===== 2012-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=392 VL-ID: ===== 392 Introduction: ============= Parallels H-Sphere delivers a multi-server hosting automation solution...

Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS

Exploit Title: Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS Google Dork: "inurl:"sites/all/modules/ckeditor" -drupalcode.org" Google Results: Approximately 379.000 results Date: 18th January 2012 Author: MaXe @InterN0T Found in a private Hatforce.com Penetration Test Software Link:...