106 matches found
CVE-2014-4597: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl parameter...
CVE-2014-4551: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in diagnostics/test.php in the Social Connect plugin 1.0.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the testing parameter...
PT-2014-5993
Name of the Vulnerable Software and Affected Versions Appointments Scheduler plugin versions 1.5 and earlier for WordPress Description The issue is related to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the...
OmniHTTPd 1.1/2.0.x/2.4 test.shtml Sample Application XSS
No description provided by source. source: http://www.securityfocus.com/bid/5568/info Cross site scripting vulnerabilities have been reported in multiple sample scripts including with OmniHTTPD. In particular, test.shtml and test.php contain errors. This type of vulnerability may be used to steal...
OmniHTTPd 1.1/2.0.x/2.4 test.php Sample Application XSS
No description provided by source. source: http://www.securityfocus.com/bid/5568/info Cross site scripting vulnerabilities have been reported in multiple sample scripts including with OmniHTTPD. In particular, test.shtml and test.php contain errors. This type of vulnerability may be used to steal...
php weather 2.2.2 (lfi/xss) Multiple Vulnerabilities
No description provided by source. Lfi/xss script: phpweather-2.2.2 download from:http://downloads.sourceforge.net/phpweather/phpweather-2.2.2.zip?modtime=1087430400&bigmirror=0 vul: /test.php line 48: requirePHPWEATHERBASEDIR . /output/pwtext$language.php; xpl:...
JFFNMS 0.8.3 admin/adm/test.php PHP Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/24414/info Just For Fun Network Management and Monitoring System JFFNMS is prone to multiple remote vulnerabilities, including a cross-site scripting issue, an SQL-injection issue, and multiple information-disclosure...
WordPress WP Social Invitations Plugin <= 1.4.4.2 - XSS
Because of this vulnerability in test.php, the attackers can inject arbitrary web script or HTML via the "xhrurl" parameter. Solution Update the plugin...
WordPress ZdStatistics Plugin <= 2.0.1 - XSS
Because of this vulnerability in cal/test.php, the attackers can inject arbitrary web script or HTML via the "lang" parameter. Solution Update the plugin...
WordPress Appointment Scheduler Plugin <= 1.5 - XSS
Because of this vulnerability in js/test.php, the attackers can inject arbitrary web script or HTML via the lang parameter. Solution Update the plugin...
cmseasy xss+csrf getshell
简要描述： 第一次XSS处就给了你了。 详细说明： lib/tool/frontclass.php None 访问http://localhost/template/default/test.php 漏洞证明： 第一次XSS处就给了你了。...
TDXK OA /general/workflow/plugin/turn/test.php SQL注入漏洞
No description provided by source...
CVE-2011-5144
Open Business Management OBM 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function...
Design/Logic Flaw
Open Business Management OBM 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function...
CVE-2011-5144
Open Business Management (OBM) server vulnerability CVE-2011-5144 affects OBM 2.4.0-rc13 and earlier. A direct request to test.php triggers phpinfo(), allowing remote attackers to obtain configuration information, i.e., partial disclosure of sensitive data. This is a server-side information discl...
PT-2012-2016
Name of the Vulnerable Software and Affected Versions EGroupware Enterprise Line versions prior to 11.1.20110804-1 EGroupware Community Edition versions prior to 1.8.001.20110805 Description The issue allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the...
CVE-2011-4950: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in phpgwapi/js/jscalendar/test.php in EGroupware Enterprise Line EPL before 11.1.20110804-1 and EGroupware Community Edition before 1.8.001.20110805 allows remote attackers to inject arbitrary web script or HTML via the lang parameter...
PT-2012-2122
Name of the Vulnerable Software and Affected Versions Open Business Management OBM versions 2.4.0-rc13 and earlier Description The issue allows remote attackers to obtain configuration information by making a direct request to "test.php", which calls the phpinfo function. Recommendations For Open...
CVE-2011-5144: Undefined Security Weakness
Open Business Management OBM 2.4.0-rc13 and earlier allows remote attackers to obtain configuration information via a direct request to test.php, which calls the phpinfo function...
Open Journal Systems (OJS) 2.3.6 - Multiple Script Arbitrary File Upload
Open Journal Systems OJS 2.3.6 - Multiple Script Arbitrary File Upload source: https://www.securityfocus.com/bid/52666/info Open Journal Systems is prone to following multiple vulnerabilities because the software fails to sufficiently sanitize user-supplied input: 1. An arbitrary-file-deletion...