10492 matches found
Cross site scripting
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the 1 Location and 2...
Microsoft Windows Search multiple security vulnerabilities
Code execution with saved search results and with search-ms: URI...
Two XSS Flaws in PrestaShop 1.1.0.3
Affects PrestaShop 1.1.0.3 product: homepage: http://prestashop.com This is XSS in the URI of PrestaShop. Trust no one, not even your $SERVERPHPSELF . http://10.1.1.155/prestashop1.1.0.3/admin/login.php/223Cscript3Ealert13C/script3E Add an item to the shoping cart and then vist this url:...
PrestaShop 1.1.0.3 Cross Site Scripting
Affects PrestaShop 1.1.0.3 product: homepage: http://prestashop.com This is XSS in the URI of PrestaShop. Trust no one, not even your $SERVERPHPSELF . http://10.1.1.155/prestashop1.1.0.3/admin/login.php/%22%3Cscript%3Ealert1%3C/script%3E Add an item to the shoping cart and then vist this url:...
PHPepperShop 1.4 Cross Site Scripting
Vulnerable Version:PHPepperShop v 1.4 Homepage:http://www.phpeppershop.com This is 4 reflective XSS flaws in the URI. Trust no one not even your $SERVERPHPSELF http://10.1.1.10/shop/kontakt.php/'alert1 http://10.1.1.10/index.php/%22%3Cscript%3Ealert1%3C/script%3E...
httpd: mod_proxy_ftp globbing XSS
A flaw was found in the modproxyftp module. Where Apache is configured to support ftp-over-httpd proxying, a remote attacker could perform a cross-site scripting attack. CVE-2008-2939...
GLSA-200812-04 : lighttpd: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200812-04 lighttpd: Multiple vulnerabilities Multiple vulnerabilities have been reported in lighttpd: Qhy reported a memory leak in the httprequestparse function in request.c CVE-2008-4298. Gaetan Bisson reported that URIs are not...
Linksys WRT160N - apply.cgi Cross-Site Scripting
Linksys WRT160N - apply.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/32496/info Linksys WRT160N is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into...
Linksys WRT160N - 'apply.cgi' Cross-Site Scripting
source: https://www.securityfocus.com/bid/32496/info Linksys WRT160N is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into opening a malicious URI. An attacker may leverage...
Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability
No description provided by source. html titleGoogle Chrome MetaCharacter URI Obfuscation Vulnerability./title head/head bodybrbr h2centerGoogle Chrome MetaCharacter URI Obfuscation Vulnerability.brbrC SecNiche Security / Proof of Concept/br/br /center/h2 center bBy:- Aditya K Sood./bbrbr hr/hr...
Updated: Google Chrome 0.4.154.25 URI Meta Character URL Obfuscation
Hi All The Google chrome new version 0.4.154.25 is also suffering from this vulnerability.The full POC have been released at milw0rm. Have a look at it: http://milw0rm.com/exploits/7226 The problem is this most of web servers have anti viruses which treated it as URL Spoofing virus. Anyways the P...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
CVE-2008-5228
Cross-site scripting XSS vulnerability in IBM Workplace Content Management WCM 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being...
Google Chrome MetaCharacter URI Obfuscation Vulnerability
Advisory: Google Chrome MetaCharacter URI Obfuscation Vulnerability. Version Affected: All Chrome/0.2.149.30 Chrome/0.2.149.29 Chrome/0.2.149.27 Description: Google chrome is vulnerable to URI Obfuscation vulnerability. An attacker can easily perform malicious redirection by manipulating the...
Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability
Exploit for unknown platform in category dos / poc ================================================================= Google Chrome Browser MetaCharacter URI Obfuscation Vulnerability ================================================================= Google Chrome MetaCharacter URI Obfuscation...
Google Chrome - MetaCharacter URI Obfuscation
Google Chrome - MetaCharacter URI Obfuscation Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more...
Google Chrome - MetaCharacter URI Obfuscation
Google Chrome MetaCharacter URI Obfuscation Vulnerability. Google Chrome MetaCharacter URI Obfuscation Vulnerability.C SecNiche Security / Proof of Concept By:- Aditya K Sood. This POC has been designed with minimum object usage. This can be made more critical dependent on the object usage. Check...
KVIrc 3.4.2 Shiny (uri handler) remote command execution exploit
!-- KVIrc 3.4.2 Shiny uri handler remote command execution exploit by Nine:Situations:Group::strawdog Tested against IE8beta/WINxpsp3 software site: http://www.kvirc.net/?lang=en description: "KVIrc is a Multilanguage, graphical IRC-Client for Windows, Linux, Unix and Mac OS..." A command line...