Mongo Web Admin 6.0 Information Disclosure

Exploit Title: Mongo Web Admin 6.0 - Information Disclosure Dork: N/A Date: 2018-11-04 Exploit Author: Ihsan Sencan Vendor Homepage: http://www.mongoadmin.org/ Software Link: https://netix.dl.sourceforge.net/project/mongo-web-admin/mongoDesktopAdminSetup-beta-6.exe Version: 6.0 Category: Webapps...

scrmetal.de Improper Access Control vulnerability

Open Bug Bounty ID: OBB-677673 Description| Value ---|--- Affected Website:| scrmetal.de Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

PT-2018-10330

Name of the Vulnerable Software and Affected Versions Quest KACE System Management Appliance version 8.0.318 Description The issue concerns the '/common/ajax email connection test.php' script, which is accessible to any authenticated user. This script is susceptible to command injection due to...

mcqforall.co.in XSS vulnerability

Open Bug Bounty ID: OBB-558252 Description| Value ---|--- Affected Website:| mcqforall.co.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

teacher.buet.ac.bd XSS vulnerability

Vulnerable URL: http://teacher.buet.ac.bd/sid/test.php?type=info=json=prompt/OPENBUGBOUNTY/...

Pligg CMS 2.0.2 CSRF漏洞

创建一个新文件，然后写入一个web后门，拿到webshell. 我们可以用另外一个方法也是可以用来getshell，先利用第一个漏洞编辑站点目录index.php，接着我们编辑保存下。 然后运保存成功后，查看index.php，然后就生成了test.php文件...

crackfind.com XSS vulnerability

Vulnerable URL: http://www.crackfind.com/test.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 153081 Google Pagerank| 2 VIP website status:| No Check crackfind.com SSL...

MyConnection Server (MCS) 9.7i Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Author: 1N3 Website: http://treadstonesecurity.blogspot.ca Vender Website: http://www.visualware.com/ Affected Product: MyConnection Server Affected Version: 9.7i others may also be vulnerable ABOUT: MyConnection Server MCS delivers a broad...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

CVE-2014-5113

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

PT-2014-6290

Name of the Vulnerable Software and Affected Versions Visualware MyConnection Server version 9.7i Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via various parameters in the...

CVE-2014-5113: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the 1 testtype, 2 ver, 3 cm, 4 map, 5 lines, 6 pps, 7 bpp, 8 codec, 9 provtext, 10 provtextextra, 11 provlink, or 12 duration...

CVE-2014-4597

Cross-site scripting XSS vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter...

CVE-2014-4597

Affected software: WordPress WP Social Invitations Plugin. Vulnerable component: test.php parameter handling (xhrurl) in versions before 1.4.4.3. Root cause: cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary script/HTML via the xhrurl parameter. Impact: potent...

CVE-2014-4551

Cross-site scripting XSS vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter...

PT-2014-5971

Name of the Vulnerable Software and Affected Versions Social Connect plugin versions 1.0.4 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the testing parameter in the...

PT-2014-6018

Name of the Vulnerable Software and Affected Versions ZdStatistics zdstats plugin versions 2.0.1 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the lang parameter in the cal/test.php file. Recommendations For...

CVE-2014-4551: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter...

PT-2014-6010

Name of the Vulnerable Software and Affected Versions WP Social Invitations plugin versions prior to 1.4.4.3 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter in...

CVE-2014-4597: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter...