Contenido CMS 4.8.12 - Cross-Site Scripting

Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor Notification: 29 September 2010 Vulnerability Type:...

Local File Inclusion Vulnerability in Novaboard

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Novaboard which could be exploited to include and execute arbitrary local files on the target system. 1 Local file inclusion in Novaboard Input passed to the "novalang" cookie in index.php is not properly sanitized before...

AChecker 1.0 - 'URI' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43240/info AChecker is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

MODx Installation File XSS Vulnerability

Title: MODx Installation File XSS Vulnerability Vendor: MODx Product: MODx CMF Tested Versions: 1.0.3, 1.0.4 Threat Class: XSS Severity: Medium Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== MODx CMF is prone to a XSS vulnerability caused by unsanitized user inp...

FaName 1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/30019/info FaName is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Bookmark4U 2.0 - incconfig.php?env[include_prefix] Remote File Inclusion

Bookmark4U 2.0 - incconfig.php?envincludeprefix Remote File Inclusion source: https://www.securityfocus.com/bid/18281/info Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

php121im_14_sql_xpl.txt

!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "a dork: inurl:php121login.php | inurl:php121im.php | intitle:"PHP121 - PLEASE"\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path:...