Check Point UTM-1 Edge and Safe 8.2.43 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/50189/info Check Point UTM-1 Edge and Safe are prone to multiple security vulnerabilities, including: 1. Multiple cross-site scripting vulnerabilities 2. Multiple HTML-injection vulnerabilities 3. Multiple cross-site request forgery vulnerabilities 4...

GoAhead Webserver multiple stored XSS vulnerabilities

Overview GoAhead Webserver 2.18 and possibly previous or newer versions, are vulnerable to multiple stored and reflective cross site scripting XSS vulnerabilities. Description GoAhead Webserver software fails to sanitize POST requests sent to the multiple functions. As a result, stored and...

La Poste FR Website - Reflective Cross Site Vulnerabilities

Document Title: =============== La Poste FR Website - Reflective Cross Site Vulnerabilities Release Date: ============= 2011-08-28 Vulnerability Laboratory ID VL-ID: ==================================== 255 Product & Service Introduction: =============================== La Poste is the mail servi...

La Poste FR Website - Reflective Cross Site Vulnerabilities

Document Title: =============== La Poste FR Website - Reflective Cross Site Vulnerabilities Release Date: ============= 2011-08-28 Vulnerability Laboratory ID VL-ID: ==================================== 255 Product & Service Introduction: =============================== La Poste is the mail servi...

VNC Server (Reflective Injection), Windows Reverse HTTP Stager (wininet)

Inject a VNC Dll via a reflective loader staged. Tunnel communication over HTTP Windows wininet This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 444 include Msf::Payload::Stager...

Windows Meterpreter (Reflective Injection), Windows Reverse HTTP Stager (wininet)

Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Tunnel communication over HTTP Windows wininet This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework modul...

Apache Archiva < 1.3.5 Multiple Vulnerabilities

According to its self-reported version, the instance of Apache Archiva hosted on the remote web server is earlier than 1.3.5 and thus is affected by multiple persistent and reflective cross-site scripting and cross-site request forgery vulnerabilities. If an attacker can trick a user of the...

Mitel Audio And Web Conferencing 4.4.30 Cross Site Scripting

PR10-15: Multiple XSS flaws within Mitel's AWC Mitel Audio and Web Conferencing Vulnerability found: 21st July 2010 Vendor informed: 26th July 2010 Vulnerability fixed: Severity: High Description: Mitel Audio and Web Conferencing AWC are a simple, cost-effective and scalable audio and web...

PR10-15: Multiple XSS flaws within Mitel&#39;s AWC &#40;Mitel Audio and Web Conferencing&#41;

PR10-15: Multiple XSS flaws within Mitel's AWC Mitel Audio and Web Conferencing Vulnerability found: 21st July 2010 Vendor informed: 26th July 2010 Vulnerability fixed: Severity: High Description: Mitel Audio and Web Conferencing AWC are a simple, cost-effective and scalable audio and web...

PR10-13: Multiple XSS and Authentication flaws within BMC Remedy Knowledge Management

PR10-13: Multiple XSS and Authentication flaws within BMC Remedy Knowledge Management Vulnerability found: 17th July 2010 Vendor informed: Vulnerability fixed: Severity: High Description: BMC Remedy Knowledge Management provides service desk analysts with a knowledge base of easy-to-find solution...

BMC Remedy Knowledge Management 7.5.00 XSS / Bypass

PR10-13: Multiple XSS and Authentication flaws within BMC Remedy Knowledge Management Vulnerability found: 17th July 2010 Vendor informed: Vulnerability fixed: Severity: High Description: BMC Remedy Knowledge Management provides service desk analysts with a knowledge base of easy-to-find solution...

Stored and Reflective XSS in Yaws-Wiki 1.88-1 &#40;Erlang&#41;

Software: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Original Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki Edit:/etc/yaws/conf.d/yaws-wiki.conf add this: server wiki po...

Yaws-Wiki 1.88-1 (Erlang) Stored and Reflective XSS Vulnerabilities

Exploit for php platform in category web applications Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki...

Yaws-Wiki 1.88-1 (Erlang) - Persistent Reflective Cross-Site Scripting

Yaws-Wiki 1.88-1 Erlang - Persistent Reflective Cross-Site Scripting Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install...

Yaws Wiki 1.88-1 Cross Site Scripting

Software: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Original Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki Edit:/etc/yaws/conf.d/yaws-wiki.conf add this: port = 8181...

Yaws-Wiki 1.88-1 (Erlang) - Persistent / Reflective Cross-Site Scripting

Application: yaws-wiki version affected: 1.88-1 platform: Erlang homepage:http://yaws.hyber.org/ Researcher: Michael Brooks Orignal Advisory:https://sitewat.ch/en/Advisory/4 Install instructions for Ubuntu: sudo apt-get install yaws-wiki Edit:/etc/yaws/conf.d/yaws-wiki.conf add this: port = 8181...

Yaws-Wiki 1.88-1 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/47158/info Yaws-Wiki is prone to multiple cross-site scripting vulnerabilities and an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Debian DSA-2158-1 : cgiirc - XSS

Michael Brooks Sitewatch discovered a reflective XSS flaw in CGI:IRC, a web-based IRC client, which could lead to the execution of arbitrary JavaScript. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

DSA-2158-1 cgiirc - cross-site-scripting

Bulletin has no description...

Pligg XSS and SQL Injection

Credit: Michael Brooks Bug Fix in 1.1.2: http://www.pligg.com/blog/1174/pligg-cms-1-1-2-release/ Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+13D' &search=on&advancesearch= Search...