joliet86.org XSS vulnerability

Open Bug Bounty ID: OBB-549774 Description| Value ---|--- Affected Website:| joliet86.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

steger.webster.k12.mo.us XSS vulnerability

Open Bug Bounty ID: OBB-549772 Description| Value ---|--- Affected Website:| steger.webster.k12.mo.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

v5/config/system.php in dayrui FineCms 5.2.0 has a default SYSKEY value and does not require key regeneration for each installation, which allows remote attackers to upload arbitrary .php files via a member api swfupload action to index.php...

File upload vulnerability in finecms latest version v5.0.8

FineCMS is a content management system based on PHP+MySql. A file upload vulnerability exists in the swfupload function in Api.php in FineCMS version 5.0.8, which can be exploited by remote attackers to upload arbitrary files...

泛微 OA /js/swfupload/swfupload.swf xss漏洞

No description provided by source...

wpadmin.foxnews.com XSS vulnerability

Open Bug Bounty ID: OBB-163468 Description| Value ---|--- Affected Website:| wpadmin.foxnews.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

raybestosgarage.com XSS vulnerability

Vulnerable URL: http://raybestosgarage.com/wp-includes/js/swfupload/swfupload.swf?movieName=%22%29;catch%28e%29if%28!self.a%29self.a=!alert%28/XSSPOSED/%29;// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:|...

WordPress < 3.3.2 Multiple Vulnerabilities

Binary data 9101.prm...

PHPWind swfupload.swf flash xss

No description provided by source...

泛微 OA /tools/SWFUpload/upload.jsp 任意文件上传漏洞

发现 tools/SWFUpload/upload.jsp ，并未验证当前用户是否为登录状态，提交文件，可直接写入根目录下。最终得到的文件访问路径为：http://www.xxoo.com/null上传的文件名.jsp。本地构造提交表单form method='post' action='http://www.xxoo.com/tools/SWFUpload/upload.jsp' enctype="multipart/form-data" input type="file" id="file" name="test" style="height:20px;BORDER: 8F908B...

SWFupload 2.5.0 - Cross Frame Scripting (XFS)

SWFupload 2.5.0 - Cross Frame Scripting XFS Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window...

SWFupload 2.5.0 - Cross Frame Scripting (XFS)

Exploit Title: SWFupload All Version XSF Vulnerability Date: 25/01/2014 Exploit Author: MindCracker - Team MaDLeeTs Contact : [email protected] - [email protected] | https://twitter.com/MindCrackerKhan Verion : All Tested on: Linux / Window Description : XSF occurs when an SWF have...

SWFupload 2.5.0 - Cross Frame Scripting (XFS) Vulnerability

Document Title: =============== SWFupload 2.5.0 - Cross Frame Scripting XFS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1422 Release Date: ============= 2015-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

SWFUpload - Cross-Site Scripting (XSS)

...

TinyMCE 3.5 - swfupload Cross-Site Scripting

The Ultimate TinyMCE WordPress plugin was affected by a swfupload Cross-Site Scripting security vulnerability...

SWFUpload 2.5.0 Beta 3 - File Arbitrary Upload

No description provided by source. Exploit Title: SWFUpload v2.5.0 Beta 3 File Arbitrary Upload Date: 07/02/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: SWFUpload v2.5.0 Beta 3 Software Link:...

litepublisher 5.72 Cross Site Scripting

Exploit Title: litepublisher 5.72 SWFUpload movieName Cross Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://litepublisher.com Version : 5.72 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Lite Publisher" + Exploit :...

DedeCMS 5.7 /images/swfupload/swfupload.swf 跨站脚本漏洞

No description provided by source...

WordPress global flash galleries插件远程文件上传漏洞

No description provided by source. Exploit : = = = = = = = = = Perl ! /usr/bin/perl use LWP; use HTTP::Request::Common; my $url, $file = @ARGV; my $ua = LWP::UserAgent-new; my $req = POST $url, ContentType = 'form-data', Content = name = $name, galleryselect = 1, Gallery ID popup.php Filedata =...

Joomla Component com_melody跨站脚本漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Joomla Component commelody XSS Vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"components/commelody/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: The Joomla melody component...