290 matches found
Clever Copy 2.0 Private Message Unauthorized Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14397/info Clever Copy is affected by an unauthorized access vulnerability. This issue is due to a failure in the application to perform proper access validation checks before granting access to private message functions...
chacmool Private Message System 1.1.3 send.php tid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11671/info Private Message System is reported prone to multiple vulnerabilities that can allow remote attackers to carry out cross-site scripting attacks and disclose arbitrary private messages. Private Message System 1.1...
chacmool Private Message System 1.1.3 send.php Arbitrary Message Access
No description provided by source. source: http://www.securityfocus.com/bid/11671/info Private Message System is reported prone to multiple vulnerabilities that can allow remote attackers to carry out cross-site scripting attacks and disclose arbitrary private messages. Private Message System 1.1...
vBulletin 3.0 Private Message HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7594/info A vulnerability has been reported in vBulletin 3.0.0 beta 2. The problem is said to occur due to insufficient sanitization of private messages. As a result, an attacker may be capable of embedding malicious HTML...
Xoops 1.3.5 Private Message System Font Attributes HTML Injection
No description provided by source. source: http://www.securityfocus.com/bid/6344/info Xoops includes a Private Message System for users, so that they may send messages to one another. HTML tags used for font attributes are not sufficiently filtered of malicious HTML code. This makes it possible f...
PowerPortal 1.1/1.3 Private Message HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10835/info A vulnerability is reported for PowerPortal which may make it prone to HTML injection attacks. The problem is said to occur due to a lack of sufficient sanitization performed on private message data...
VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
No description provided by source. !/usr/bin/python -- coding: iso-8859-15 -- ''' | || | | | | | ' / -||| ' / | '/ / / \ \ / ||||||| ./,|| ,,/\ || ------------------------------------------------------------------------------------------------ This is a Public Exploit. 22/11/2007...
eazyPortal 1.0.0 - Multiple Vulnerabilities
No description provided by source. ----------------------------------------------------------------------------------------------- Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 02. January 2010...
OpenBB 1.0.x Private Message Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10217/info It has been reported that OpenBB is affected by a private message disclosure vulnerability. This issue is due to a design error that fails to validate user credentials. This issue might allow an attacker to rea...
Private Message System 2.x index.php Page Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9308/info Private Message System is prone to a cross-site scripting vulnerability. This issue may be exploited by creating a malicious link to a site hosting the software with hostile HTML and script code embedded in URI...
vBulletin 5.1 Cross Site Scripting
Exploit Title: vBulletin 5.1 Multiple XSS vulnerabilities Authors: Romanian Security Team Website: https://rstforums.com/forum/ Date published: 19 April 2014 Software: vBulletin Version: 5.1.1 Alpha 9 XSS Random topic -...
Concrete CMS: XSS in private message
fill tittle of the message with tags...
DEBIAN-CVE-2010-3443
ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service unresponsive IRC via multiple Client-To-Client Protocol CTCP requests in a PRIVMSG message...
Facebook - Private Message (Attachment ID) Vulnerability
Document Title: =============== Facebook - Private Message Attachment ID Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1087 View: http://www.youtube.com/watch?v=azzZ7KDMMKw Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID:...
Facebook - Private Message (Attachment ID) Vulnerability
Document Title: =============== Facebook - Private Message Attachment ID Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1087 View: http://www.youtube.com/watch?v=azzZ7KDMMKw Release Date: ============= 2013-09-23 Vulnerability Laboratory ID VL-ID:...
Private Message System 2.3.0 <= XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: Private Message System 2.3.0 alert1337; Test : http://upload.traidnt.net/upfiles/4ul41244.jpg Demo: 01 :http://ptl.su/pms/index.php?page="alert1337; 02 :http://qgcomedyshow.freehostia.com/community/mail/index.php?page="alert1337...
PT-2012-5416
Name of the Vulnerable Software and Affected Versions Privatemsg module versions 7.x-1.x before 7.x-1.3 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via a user name in a private message. Recommendations For Privatemsg module...
vBulletin 4.1.7 => 4.1.10 XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: vBulletin 4.1.7 = 4.1.10 XSS Vulnerability Google Dork: intitle: powered by vBulletin 4.1.10 Date: 20/02/2012 Author: .e0f Software Link: http://www.vbulletin.com/ Version: 4.1.10 Others not tested Tested on: BackTrack 5 |...
PunBB Private Message System <= 1.2.3 XSS Vulnerability (5)
Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...
PunBB Private Message System <= 1.2.3 XSS Vulnerability (3)
Exploit for php platform in category web applications =========================================================== PunBB Private Message System Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0...