3058 matches found
Barracuda Networks #35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability
Document Title: =============== Barracuda Networks 35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1101 Barracuda Networks Security ID BNSEC: BNSEC-2361...
CVE-2014-3324
CVE-2014-3324 affects Cisco TelePresence Server Software 4.0(2.8). The vulnerability is in the administrative web interface login page, where insufficient input validation of certain HTTP GET/POST parameters allows unauthenticated remote attackers to inject arbitrary script/HTML (XSS). Cisco’s ad...
CVE-2014-2968
CVE-2014-2968 is a stored cross-site scripting (XSS) vulnerability in the Huawei E355 series web interface. The issue affects the CH1E355SM device with software 21.157.37.01.910 and Web UI 11.001.08.00.03, allowing an attacker to inject arbitrary script or HTML via an SMS message when interacting...
CVE-2014-4557
CVE-2014-4557 concerns the WordPress plugin Swipe Checkout for Jigoshop (swipe-hq-checkout-for-jigoshop), affecting version 3.1.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in test-plugin.php that allows remote attackers to inject arbitrary web script or HTML through the ...
Cross site scripting
Cross-site scripting XSS vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification boxes...
CVE-2014-4533
The CVE-2014-4533 entry describes a Cross-site scripting (XSS) flaw in the WordPress GEO Redirector plugin, via ajax_functions.php, affecting version 1.0.1 and earlier. The vulnerability is exploitable through the hid_id parameter to inject arbitrary script/HTML. Affected component: GEO Redirecto...
TikiWiki Project 1.8 User Profile Multiple Option Arbitrary Remote Code Injection
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
WebCalendar 1.2.4 Pre-Auth Remote Code Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
OSTicket 1.2/1.3 - Multiple Input Validation and Remote Code Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13478/info osTicket is affected by multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Reportedly the application permits the inclusion...
phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection Exploit
No description provided by source. ?php / ------------------------------------------------------------------------ phpLDAPadmin = 1.2.1.1 queryengine Remote PHP Code Injection Exploit ------------------------------------------------------------------------ author...............: EgiX...
PhpTax pfilez Parameter Exec Remote Code Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Maxwebportal <= 1.36 password.asp Change Password Exploit (1 - html)
No description provided by source. !-- Hi, I'm Soroush Dalili from Grayhatz Security Group GSG . I found dangerous sql injection in Maxwebportal version 1.35,1.36,2.0, 20050418 Next Remote user can inject his/her code in memKey var. and change other users password in password.asp Exploit codes to...
phpMyAdmin 2.5.7 - Remote code injection Exploit
No description provided by source. / phpmy-explt.c written by Nasir Simbolon nasir kecapi com eagle kecapi com Jakarta, Indonesia June, 10 2004 A phpMyAdmin-2.5.7 exploite program. This is a kind of mysql server wrapper acts like a proxy except that it will sends a fake table name, when client...
Dolphin <= 7.0.7 (member_menu_queries.php) Remote PHP Code Injection
No description provided by source. ?php / ---------------------------------------------------------------------------- Dolphin = 7.0.7 membermenuqueries.php Remote PHP Code Injection Exploit ---------------------------------------------------------------------------- author...............: EgiX...
phpliteadmin <= 1.9.3 - Remote PHP Code Injection Vulnerability
No description provided by source. Exploit Title: phpliteadmin = 1.9.3 Remote PHP Code Injection Vulnerability Google Dork: inurl:phpliteadmin.php Default PW: admin Date: 01/10/2013 Exploit Author: L@usch - http://la.usch.io - http://la.usch.io/files/exploits/phpliteadmin-1.9.3.txt Vendor Homepag...
phpLDAPadmin <= 1.2.1.1 (query_engine) Remote PHP Code Injection
No description provided by source. $Id: phpldapadminqueryengine.rb 14060 2011-10-25 05:25:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Tiki Wiki CMS Groupware <= 8.2 (snarf_ajax.php) Remote PHP Code Injection
No description provided by source. ------------------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.2 snarfajax.php Remote PHP Code Injection ------------------------------------------------------------------------- author...........: Egidio Romano aka EgiX...
PAJAX <= 0.5.1 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print PAJAX Remote Code Injection - code by: Stoney - exploit found by: RedTeam\n; if $ARGV0 && $ARGV1 $host = $ARGV0; $path = $ARGV1; $sock = IO::Socket::INET-new Proto = tcp, PeerAddr = $host, PeerPort = 80 || die connecterror\n;...
txtForum 1.0.3/1.0.4 - Remote PHP Script Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17061/info txtForum is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attacks are also possible. form...
CiviCRM for Joomla 4.2.2 - Remote Code Injection
No description provided by source. Exploit Title: joomla component comcivicrm remode code injection exploit Google Dork:Index of /joomla/administrator/components/comcivicrm/civicrm/packages/OpenFlashChart Date: 20/04/2013 Exploit Author: iskorpitx Vendor Homepage: http://civicrm.org Software Link...