CVE-2011-5074

Multiple cross-site request forgery CSRF vulnerabilities in Support Incident Tracker aka SiT! before 3.65 allow remote attackers to hijack the authentication of administrators for requests that change administrator email, add a new administrator, or insert arbitrary script via 1 userprofileedit.p...

PT-2012-2052

Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions prior to 3.65 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 snippets in a user comment, which is not properly handled in a Confluence page, or 2 the user profile display name,...

CVE-2011-4822

Multiple cross-site scripting XSS vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 snippets in a user comment, which is not properly handled in a Confluence page, or 2 the user profile display name,...

CVE-2011-4822: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the user profile feature in Atlassian FishEye before 2.5.5 allow remote attackers to inject arbitrary web script or HTML via 1 snippets in a user comment, which is not properly handled in a Confluence page, or 2 the user profile display name,...

PT-2011-5122

Name of the Vulnerable Software and Affected Versions Atlassian FishEye versions prior to 2.5.5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the user profile feature. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via two...

XSS vulnerability in a user's comment

We have identified and fixed a stored cross-site scripting XSS vulnerability in the FishEye user profile. Affected versions are all versions earlier than 2.5.5 XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attac...

XSS vulnerability in a user's comment

We have identified and fixed a stored cross-site scripting XSS vulnerability in the FishEye user profile. Affected versions are all versions earlier than 2.5.5 XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attac...

KaiBB 2.0.1 - SQL Injection Arbitrary File Upload

KaiBB 2.0.1 - SQL Injection Arbitrary File Upload source: https://www.securityfocus.com/bid/49421/info KaiBB is prone to multiple SQL-injection vulnerabilities and a arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could allow an attacke...

ICQ vulnerable to account theft using JavaScripts

ICQ vulnerable to account theft using JavaScripts In security advisories for ICQ https://noptrix.net/advisories/icqclixss.txtand the ICQ web site https://noptrix.net/advisories/icqwebxss.txt, security researcher Levent Kayan warns that both the ICQ instant messenger for Windows and the ICQ web si...

BlueSoft Social Networking CMS - SQL Injection

source: https://www.securityfocus.com/bid/48707/info BlueSoft Social Networking CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

OpenCollab 1.4.3 Cross Site Scripting

------------------------------------------------------------------------ Software................OpenCollab 1.4.3 Vulnerability...........Persistent Cross-site Scripting Threat Level............Moderate 2/5 Download................http://www.opencollab.de/ Vendor Contact Date.....3/10/2011...

Joomla! Component com_idoblog - SQL Injection

Exploit Title: joomla comidoblog /SQL injection Vulnerability Google Dork: inurl:"comidoblog" Date: 25/12/2010 Author: NOCKAR1111 Location:Algeria AuthorEmail:[email protected] Language: php Tested on: windows xp sp3 en http://extensions.joomla.org/extensions/news-production/blog/9218...

LFI / RCE vlunerability in Joomla Community Builder Enhenced (CBE) Component

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

Joomla Community Builder Enhanced Local File Inclusion

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

Joomla Community Builder Enhenced Component LFI/RCE Vulnerability

Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...

DMXReady Members Area Manager - Persistent Cross-Site Scripting

DMXReady Members Area Manager - Persistent Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXReady Members Area Manager Persistent XSS Vendor url:http://www.dmxready.com/ Version:2 Price:295$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effect...

Buy Dating Persistent Xss

Exploit for php platform in category web applications ========================= Buy Dating Persistent Xss ========================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

iScripts EasyBiller Cross Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ iScripts EasyBiller Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download : http://www.iscripts.com/easybiller/ $ Date : 02/07/2010 $ Emai...

2DayBiz Video Community Portal - user-profile.php SQL Injection

2DayBiz Video Community Portal - user-profile.php SQL Injection $------------------------------------------------------------------------------------------------------------------- $ 2daybiz Video Community portal"user-profile.php" SQL injection $ Author : Sangteamtham $ Home : Hcegroup.net $...