33 matches found
encrier.perso.sfr.fr XSS vulnerability
Vulnerable URL: http://encrier.perso.sfr.fr/illustres.php?iana=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:14 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...
SFR Box NB6多个跨站脚本漏洞
CVE ID:CVE-2014-1599 SFR Box NB6是一款路由器设备。 通过/network/dns, /network/dhcp, /network/nat, /network/route, /network/lan和/wifi/config传递的输入在返回用户之前缺少过滤,允许远程攻击者利用漏洞注入恶意脚本或HTML代码,当恶意数据被查看时,可获取敏感信息或劫持用户会话。 0 SFR Box NB6 目前没有详细解决方案:...
SFR ADSL/Fiber Box multiple security vulnerabilities
Crossite scripting...
CVE-2014-1599 - 39 Type-1 XSS in SFR DSL/Fiber Box
CVE-2014-1599 39 Type-1 XSS in SFR ADSL/Fiber Box. SFR is the french Vodafone estimated DSL user base of 5.2 Millions. affected product: SFR BOX NB6-MAIN-R3.3.4 vulnerabilities: /network/dns 5 non-filtered Type-1 XSS /network/dhcp 6 non-filtered Type-1 XSS /network/nat 7 non-filtered Type-1 XSS...
CVE-2014-1599
Multiple cross-site scripting XSS vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 dns, 2 dhcp, 3 nat, 4 route, or 5 lan in network/; or 6 wifi/config...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 dns, 2 dhcp, 3 nat, 4 route, or 5 lan in network/; or 6 wifi/config...
CVE-2014-1599
CVE-2014-1599 relates to multiple XSS vulnerabilities in the SFR Box NB6 router, firmware NB6-MAIN-R3.3.4. Public sources describe non-filtered inputs in several UI endpoints: /network/dns, /network/dhcp, /network/nat, /network/route, /network/lan, and /wifi/config, which can reflect arbitrary sc...
CVE-2014-1599
Multiple cross-site scripting XSS vulnerabilities in the SFR Box router with firmware NB6-MAIN-R3.3.4 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 dns, 2 dhcp, 3 nat, 4 route, or 5 lan in network/; or 6 wifi/config...
Simple HTTPd 1.42 - PUT Remote Buffer Overflow
Simple HTTPd 1.42 - PUT Remote Buffer Overflow !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Date: 2011-08-02 Author: nion Software: http://code.google.com/p/mongoose/...
Simple HTTPd 1.42 PUT Request Remote Buffer Overflow Vulnerability
Exploit for windows platform in category remote exploits !/usr/bin/env python part of femtocell research by TU-Berlin only for educational purposes Exploit Title: remote root on sfr/ubiquisys femtocell webserver wsal/shttpd/mongoose Author: nion Software: http://code.google.com/p/mongoose/...
Netzbrett Database Disclosure Vulnerability
Exploit for unknown platform in category web applications =========================================== Netzbrett Database Disclosure Vulnerability =========================================== ============================================================================== » Note : Tribute to the...
ProManager 0.73 - 'config.php' Local File Inclusion
-------------------------------------- Pro Manager 0.73 Local File Inclusion Vuln -------------------------------------- http://www.sfr-fresh.com/unix/privat/proManager-0.73.tar.gz -------------------------------------- By : Stack email : Wanted -------------------------------------- Exploit :...
ff-rfi.txt
firefly 1.1.01 = Remote File Include Vulnerablitiy D.Script: http://fresh.t-systems-sfr.com/unix/src/privat2/firefly-1.1.01.tar.gz Discovered by: Alkomandoz Hacker Homepage: asb-may.net & mohandko.com & sniper-sa.com & Tryag.com ====================================...