882 matches found
YXcmsApp某处xss导致getshell
简要描述： xss到后台导致getshell一条龙服务不过略鸡肋。 详细说明： YXCMS是一款面向企业的内容管理系统，采用三级缓存，MVC架构以BSD协议开源。 注册了用户以后来到用户管理页面，点击信息发布 - 增加咨询，发现是一个富文本编辑器，kindeditor。不管是什么编辑器，既然给了一个用户这么大的权限，这种情况下很容易出现xss。 随便输入点什么东西，抓包，修改content字段内容，写你的xss代码，什么都行。 好了。管理员在后台就能看到我提交的文章： 然后编辑的话就能触发xss：...
OTRS < 3.0.0-beta2 XSS Vulnerability
Open Ticket Request System OTRS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Kali Applications Automatic Installer Script: KAAIS
KAAIS Kali Applications Automatic Installer Script Let’s you easily install some applications which doesn’t come by default with the Kali Linux distribution. It’s user friendly and it incorporates some other things. It also gets updated regularly. Features Skype VideoChat Application TeamViewer...
Fedora Update for nodejs-editor FEDORA-2013-11780
Check for the Version of nodejs-editor OpenVAS Vulnerability Test Fedora Update for nodejs-editor FEDORA-2013-11780 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
[SECURITY] Fedora 17 Update: kate-4.10.5-1.fc17
Advanced Text Editor...
[SECURITY] Fedora 18 Update: kdesdk-4.10.5-1.fc18
A metapackage/collection of applications and tools used by developers, incl uding: cervisia: a CVS frontend kate: advanced text editor kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays designer's UI files lokalize: computer-aided...
[SECURITY] Fedora 18 Update: kate-4.10.5-1.fc18
Advanced Text Editor...
[SECURITY] Fedora 18 Update: nodejs-editor-0.0.4-2.fc18
Launch the default text editor from Node.js programs...
CVE-2013-3768
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Rich Text Editor...
Design/Logic Flaw
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Rich Text Editor...
CVE-2013-3768
CVE-2013-3768 describes an unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (versions 8.51, 8.52, 8.53 ). The flaw allows remote attackers to affect integrity via unknown vectors related to the Rich Text Editor . The description does not s...
CVE-2013-3768
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Rich Text Editor...
3 6 0 Forum stored xss can be introduced into the virus hung it-vulnerability warning-the black bar safety net
1 vulnerability location: 3 6 0 Forum any plate, post, reply in the rich text editor. 2 Use code:! 3 vulnerability hazards: pass to kill 3 6 0 all Forum sections. Due to China's current IE6 users is fairly large, the most recent statistics for the 2 1. 3 per cent. So the harm is pretty large, so...
Fedora Update for kdesdk FEDORA-2013-10182
Check for the Version of kdesdk OpenVAS Vulnerability Test Fedora Update for kdesdk FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Fedora Update for kate FEDORA-2013-10182
Check for the Version of kate OpenVAS Vulnerability Test Fedora Update for kate FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
[SECURITY] Fedora 17 Update: kdesdk-4.10.4-1.fc17
A metapackage/collection of applications and tools used by developers, incl uding: cervisia: a CVS frontend kate: advanced text editor kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays designer's UI files lokalize: computer-aided...
[SECURITY] Fedora 17 Update: kate-4.10.4-1.fc17
Advanced Text Editor...
Fedora Update for kate FEDORA-2013-10130
Check for the Version of kate OpenVAS Vulnerability Test Fedora Update for kate FEDORA-2013-10130 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
[SECURITY] Fedora 18 Update: kdesdk-4.10.4-1.fc18
A metapackage/collection of applications and tools used by developers, incl uding: cervisia: a CVS frontend kate: advanced text editor kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays designer's UI files lokalize: computer-aided...