2864 matches found
Fedora 22 : mediawiki-1.25.3-1.fc22 (2015-24fe8b66c9)
https://www.mediawiki.org/wiki/Releasenotes/1.25MediaWiki1.25.3 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additiona...
u-home.48h.tw XSS vulnerability
Open Bug Bounty ID: OBB-132747 Description| Value ---|--- Affected Website:| u-home.48h.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
U-Mail V9.8.57 /fast/default/operates.php 任意用户登录及注入漏洞
No description provided by source...
u-20.ge XSS vulnerability
Vulnerable URL: http://www.u-20.ge/club.php?tmp=64'"/alert/xssposed/...
U-Mail Mail System Arbitrary File Containment Vulnerability
U-mail is a mail service system. The U-Mail mail system suffers from an arbitrary file inclusion vulnerability, which allows an attacker to exploit the vulnerability to download and view arbitrary files and obtain sensitive server information...
U-mail Mail System File Upload Vulnerability
U-mail is a mail service system. A file upload vulnerability exists in U-Mail for Windows V9.8.57. The vulnerability allows attackers to upload backdoor files and gain server privileges...
u-clermont1.fr XSS vulnerability
Open Bug Bounty ID: OBB-91466 Description| Value ---|--- Affected Website:| u-clermont1.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
u-grenoble3.fr XSS vulnerability
Vulnerable URL: http://www.u-grenoble3.fr/servlet/com.jsbsoft.jtf.core.SG?PROC=RECHERCHE=RECHERCHER=%3Cimg%20src=x%20onerror=prompt%28/XSSPOSED/%29%3E=U3FRETUD091=0 Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:14 GMT Vulnerability type:|...
WordPress U-Design Theme 2.7.9 Cross Site Scripting Vulnerability
WordPress U-Design theme versions 2.3.0 through 2.7.9 suffer from a cross site scripting vulnerability. u-desing is a wordpress theme prone to DOM XSS vulnerability. Vendor url: http://themeforest.net/item/udesign-responsive-wordpress-theme/253220 versions between 2.7.9 – Updated: 08.05.2015 and...
Apple iTunes U - Persistent POST Inject Web Vulnerability
Document Title: =============== Apple iTunes U - Persistent POST Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1532 Apple ID: 624515538 Release Date: ============= 2015-08-11 Vulnerability Laboratory ID VL-ID:...
Apple iTunes U - Persistent POST Inject Web Vulnerability
Document Title: =============== Apple iTunes U - Persistent POST Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1532 Apple ID: 624515538 Release Date: ============= 2015-08-11 Vulnerability Laboratory ID VL-ID:...
Using V8 U-AIR wizards to restore Exchange 2003 and 2007
This KB article documents the procedure for restoring Application Items for Exchange 2003 and Exchange 2007. The Veeam Explorer for Microsoft Exchange does not support these versions of Exchange. In o...
U-Mail mail system bulk getshell（truly unlimited, no General account-the vulnerability warning-the black bar safety net
The mail system is there any user login, and the presence of injection, which can be unlimited perfect getshell（getshell process only takes three simple. Mad Dog, this is not struck by lightning while waiting to be burst chrysanthemum. Detailed description: 1. Mail System Description 1 Official...
u-Auctions - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: u-Auctions Multiple Vulnerabilities Google Dork: "Powered by u-Auctions ©" Date: 03 April 2015 Exploit Author: Don Vendor Homepage: https://www.u-auctions.com / Version: ALL Tested on: Debian 1. Blind SQL injection: This...
u-Auctions - Multiple Vulnerabilities
u-Auctions - Multiple Vulnerabilities Exploit Title: u-Auctions Multiple Vulnerabilities Google Dork: "Powered by u-Auctions ©" Date: 03 April 2015 Exploit Author: Don Vendor Homepage: https://www.u-auctions.com / Version: ALL Tested on: Debian 1. Blind SQL injection: This vulnerability affects...
u-Auctions - Multiple Vulnerabilities
Exploit Title: u-Auctions Multiple Vulnerabilities Google Dork: "Powered by u-Auctions ©" Date: 03 April 2015 Exploit Author: Don Vendor Homepage: https://www.u-auctions.com / Version: ALL Tested on: Debian 1. Blind SQL injection: This vulnerability affects /adsearch.php URL encoded POST input...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...
U-Mail邮件系统二次注入3（不鸡肋，可获取管理员密码）
简要描述： U-Mail邮件系统二次注入漏洞，可直接获取管理员密码 详细说明： 版本：最新版v9.8.57 漏洞文件 /client/oab/module/operates.php 代码 if ACTION == "save-to-pab" includeonce LIBPATH."PAB.php" ; $PAB = PAB::getinstance ; $maillistid = gss $GET'maillist' ; if $maillistid $memberall = $Maillist-getMemberByMaillistID $maillistid,...