847 matches found
Oatmeal Studios Mail File 1.10 Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1807/info OatMeal studios' Mail-File is a cgi application that allows for sending of certain files to user-specified email addresses via a web interface. A vulnerability exists in this script that can be used to send the...
MyBB 1.0/1.1 Index.PHP Referrer Cookie SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can allow an attacker to...
cPanel < 11.25 CSRF - Add User php Script
No description provided by source. Exploit Title: cPanel 11.25 CSRF - Add php script Date: 27.05.2011 Author: ninjashell Software Link: http://cpanel.net Version: 11.25 see details below Tested on: Linux CVE : N/A I. Introduction cPanel versions below and excluding 11.25 , are vulnerable to CSRF...
CNC Technology BizDB 1.0 bizdb-search.cgi Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1104/info BizDB is a web databse integration product using perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at th...
PMachine ExpressionEngine 1.4.1 HTTP Referrer HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16377/info ExpressionEngine is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to HTTP 'Referer' header before using it in dynamically...
CFME: CSRF protection vulnerability in referrer header
CFME: CSRF protection vulnerability via permissive check of the referrer header...
Webmin vulnerable to cross-site scripting
Overview Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability when "referrer checking" is turned off. Note that "referrer checking" is enabled by default. hasegawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...
JVN#02213197: Webmin vulnerable to cross-site scripting
Webmin is a web-based system management tool. Webmin contains a cross-site scripting vulnerability when "referrer checking" is turned off. Note that "referrer checking" is enabled by default. Impact An arbitrary script may be executed on a user's web browser who is logged into Webmin. Solution...
Dropbox Patches Shared Links Privacy Vulnerability
Dropbox has acknowledged and disabled a vulnerable shared links feature that exposed documents stored by the service to third parties. Shared links are a collaboration feature that allows user, especially in a business environment, to share and edit documents. Dropbox rival Intralinks reported th...
Use of the referrer header on the error page for Crucible can enable XSS attacks
If the referrer header is manipulated and an error condition is triggered, the user will be displayed the error page in FeCru, which includes the manipulated referrer value on the page as a link. The use of the referrer header value directly as the target of a hyperlink can result in the user...
Use of the referrer header on the error page for Crucible can enable XSS attacks
If the referrer header is manipulated and an error condition is triggered, the user will be displayed the error page in FeCru, which includes the manipulated referrer value on the page as a link. The use of the referrer header value directly as the target of a hyperlink can result in the user...
IRCCloud: Leaking Referrer in Reset Password Link
I have found that you are leaking via the referrer the reset password link. I am attaching the photo as proof of concept that the site is indeed leaking the reset password link via the referrer. Thats when someone loads the reset password link and decided to click on external links. Its the time...
C2FO: Password reset token leakage through referrer at https://app.c2fo.com/password/reset/
Hi there, another bug I came across. There's a possible password reset token leakage on the password reset page. Steps to reproduce 1. Go to https://app.c2fo.com/password-reset and request a new password with your existing test account 2. Click on the password reset link which you'll receive via...
Coinbase: Improper Validation of the Referrer header leading to Open URL Redirection
Using a proxy tool such as Burp, set the Target as https://coinbase.com. Then, send the following request: GET /cdn-cgi/l/chkjschl HTTP/1.1 Host: coinbase.com Referer: http://attacker.com Content-Length: 2 Notice the attacker's domain in the Referrer header. This value is not being validated on t...
url_session
This plugin finds URLs which contain a parameter that stores the session ID. This configuration leaves the session id exposed in browser and server logs, and is also leaked through the HTTP referrer header. Plugin type Grep Options This plugin doesnt have any user configured options. Source For...
Crafty Syntax Live Help RFI / Path Disclosure
Exploit Title : Crafty Syntax Live Help = 2.. & 3.. RFI + Path Disclosure Date : 4/19/2013 Author : ITTIHACK Home : http://ittihack.com Vendor : http://www.craftysyntax.com Download : http://www.craftysyntax.com/craftysyntax3.4.1.zip Version : 2. and 3. , All versions Category : webapps Google do...
SQL injection in DefaultReferralManager
In confluence-core/confluence/src/java/com/atlassian/confluence/links/DefaultReferralManager.java the DefaultReferralManager class the deleteReferrersWithPrefix method is vulnerable to sql injection through the user controlled 'prefix' parameter. It is possible to exploit this issue as an Admin...
BlackHole Exploit Kit 2.0 released with more latest Exploits
According to release announcement on Pastebin by unknown developers in a Russian-language BlackHole Exploit Kit 2.0 released with more latest Exploits. BlackHole is one of the most dominant exploit toolkits currently available in the underground market. It enables attackers to exploit security...
HULK DDoS Tool Smash Web Server, Server Fall Down
For the aspiring attacker or pen tester, there is no shortage of attack tools, scripts, crimeware kits and exploits available online. But, the Internet being what it is, there’s always room for one more. Enter HULK, a new DDoS tool that arrives just in time to coincide with the release of some...
AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload
Exploit Title: AllWebMenus WordPress Menu Plugin Arbitrary file upload Version: 1.1.9 Date: 2012-01-19 Author: 6Scan http://6scan.com security team Software Link: http://wordpress.org/extend/plugins/allwebmenus-wordpress-menu-plugin/ Official fix: This advisory is released after the vendor was...