70 matches found
MODx CMS 2.2.14 - Cross-Site Request Forgery Bypass / Reflected Cross-Site Scripting / Persistent Cross-Site Scripting
Advisory ID: 92152 Product: MODX Revolution Vendor: MODX Vulnerable Versions: 2.0.02.2.14 Tested Version: 2.2.14 Advisory Publication: 16 July, 2014 without technical details Vendor Notification: 16 July, 2014 Vendor Patch: 15 July, 2014 Public Disclosure: 2 November , 2014 Vulnerability Type:...
ManageEngine ServiceDesk Plus 8.0 - Multiple Stored XSS Vulnerabilities
No description provided by source. ManageEngine ServiceDesk Plus 8.0 Multiple Stored XSS Vulnerabilities Vendor: Zoho Corporation Pvt. Ltd. Product web page: http://www.manageengine.com Affected version: 8.0.0 Build 8013 Enterprise Summary: ServiceDesk Plus integrates your help desk requests and...
Zoho BugTracker Multiple Stored XSS Vulnerabilities
Summary Zoho Bug Tracker is an online bug tracking software that combines a clean and an intuitive interface to submit and track bugs with custom workflows, business rules, custom fields and filters for the bugs that software projects are bound to generate and fix all bugs fast. Description The B...
Geosoft Technologies SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...
Web2bizz Remote File UPLOAD
Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Web2bizz Pvt. Ltd. RFUPLOAD Date : 20-04-2012 Author : TeaM MosTa Version : /N/ Dork : "Powered ...
Joomla Beatz 1.x Cross Site Scripting
OVERVIEW Beatz 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Beatz is a set of powerful Social Networking Script Joomla! 1.5 plugins that allows you to start your own favourite artist band website. Although it is just a Joomla! plugin, it comes with full Joolma! bundle for...
Cyberoam Unified Threat Management: Insecure Password Handling
Hi, Please find below the details of a vulnerability I discovered in Cyberoam UTM device. The Vendor was notified, however I did not receive any response from Vendor despite repeated email reminders. SECURITY ADVISORY: cyberoam-utm-insecure-password-handling Affected Software: Cyberoam CR50ia...
Infoserve SQL Vulnerability
Exploit for php platform in category web applications ============================================================================================================= - Optimiz3r - | | | | |--..-----.| | |.---.-..----.| |--..-----..----..-----.| |.----..--------..--.--. | | | | || -|| || || || | -||...
Yahoo! Mail Cross Site Request Forgery
======================================================================= YAHOOMAIL CSRF Vulnerability ======================================================================= Vulnerability found in- Yahoomail Delete Contact module email [email protected] company AKS IT Services Pvt. Ltd...
PMS (pvt) CMS Multiple SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================== PMS pvt CMS Multiple SQL Injection Vulnerability ================================================== +Title: PMS pvt CMS Multiple SQL Injection Vulnerability + About :...