WordPress Hotel Booking System Pro 1.1 Cross Site Scripting

Exploit Title: WordPress Hotel Booking System Pro v1.1 XSS Vunlerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/online-hotel-booking-system-pro-wordpress-plugin/9338914 Version: 1.1 Tested on: 5.4.0-4parrot1-amd64...

Online Hotel Booking System Pro 1.3 Cross Site Scripting

Exploit Title: Online Hotel Booking System Pro v1.3 XSS Vulnerability Google Dork:N/A Date: 2020-04-04 Exploit Author: @ThelastVvV Vendor Homepage: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Version: 1.3 Tested on: 5.4.0-4parrot1-amd64...

Security Bulletin: IBM Cloud Automation Manager Session Fixation Vulnerability (CVE-2019-4617)

Summary IBM Cloud Automation Manager Session Fixation Vulnerability Vulnerability Details CVEID: CVE-2019-4617 DESCRIPTION: IBM Cloud Automation Manager does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability. This could for...

CVE-2019-13200

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13198

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Stored XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13200

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13167

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13167

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

Cross site scripting

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Stored XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

Cross site scripting

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13167

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

Design/Logic Flaw

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13167

Multiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser 3320 V53.006.16.000 and other printers. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13167

CVE-2019-13167 involves multiple stored XSS flaws in the Xerox Web Application used by Phaser 3320 (V53.006.16.000) and other printers. The underlying issue is cross-site scripting stored in the web interface, allowing an attacker to perform actions on behalf of an administrator or trigger unwant...

CVE-2019-13198

The CVE-2019-13198 vulnerability affects the web application of Kyocera ECOSYS M5526cdw (example 2R7_2000.001.701). It is a Stored XSS in the printer’s Web UI caused by insufficient input validation, which can lead to administrator session hijacking or execution of unintended actions. The connect...

CVE-2019-13198

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Stored XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13200

The web application of several Kyocera printers such as the ECOSYS M5526cdw 2R72000.001.701 was affected by Reflected XSS. Successful exploitation of this vulnerability can lead to session hijacking of the administrator in the web application or the execution of unwanted actions...

CVE-2019-13200

CVE-2019-13200 affects the web application of Kyocera ECOSYS M5526CDW (example 2R7_2000.001.701). The vulnerability is Reflected XSS in the Web UI, arising from insufficient validation of client-side data, which can allow an attacker to hijack administrator sessions or perform unwanted actions wi...

Puppet Enterprise Console Cross-Site Request Forgery Vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. A cross-site request forgery...

HUMAX HGA12R-02 BRGCAA Session Hijacking Vulnerability

The HUMAX HGA12R-02 BRGCAA is a wireless router from HUMAX Korea. A security vulnerability exists in the session management feature in the HUMAX HGA12R-02 BRGCAA version 1.1.53. An attacker can exploit the vulnerability to hijack a valid user session and thus create a user account or control a...