MetInfo Cross-Site Scripting Vulnerability

MetInfo is an enterprise website management system with PHP Mysql architecture. MetInfo suffers from a cross-site scripting vulnerability. Allow attackers to insert malicious code, obtain user cookies, etc...

WEBSQUARE JOB-CUBE -JOB WEB SYSTEM and -JOB WEB SYSTEM High Income Cross-Site Scripting Vulnerabilities

WEBSQUARE JOB-CUBE -JOB WEB SYSTEM and -JOB WEB SYSTEM High Income are both web site construction systems from WEBSQUARE Japan. A cross-site scripting vulnerability exists in WEBSQUARE JOB-CUBE -JOB WEB SYSTEM versions prior to 1.2.2 and -JOB WEB SYSTEM High Income versions 1.0.6 and prior. A...

CVE-2016-1144

Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1144

Cross-site scripting (CWE-79) vulnerability in WEBSQUARE JOB-CUBE -JOB WEB SYSTEM and -JOB WEB SYSTEM High Income. Affected versions include JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier. An attacker authenticated to the system could inject arbitrary web ...

CVE-2016-1144

Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1144: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Four Vulnerabilities Patched in SCADA Server

Four different remotely exploitable vulnerabilities were recently discovered and patched in a popular SCADA server. The vulnerabilities exist in some versions of IntegraXor, a SCADA server manufactured by Ecava Sdn Bhd, a Malaysian-based software company. The Industrial Control Systems Cyber...

强智综合教务系统后台上传漏洞，可沦陷服务器

简要描述： 后台上传获取webshell 通过搜索获得Oracle数据库管理权限 修改成绩 详细说明： http://www.qzdatasoft.com:8088/qznjw/ewebeditor/admin/ 默认账号密码admin 直接上传webshell 获取root权限 （ewebeditor后台授权漏洞修补 目前无法使用ewebeditor后台进行上传） 搜索 oracle.jdbc.driver.OracleDriver 可以获取Oracle数据库账号密码 通过官方PDF文档知晓 成绩保存在CJ0708 补考保存在CJ0708BK 通过近期对服务器信息收集发现...

Simple Machines Forum 2.0.3 File Disclosure

Summary: -------------- A security flaw allows an attacker to know the full source file of the web system. Details: ----------- Sources/ManageErrors.php Line 340: // Make sure the file we are looking for is one they are allowed to look at if !isreadable$file || strpos$file, '../' !== false &&...

Simple Machines Forum 2.0.3 Path Disclosure

Summary: -------------- A security flaw allows an attacker to know the full path of the web system. Details: ----------- SSI.php Line 294: // Fetch a post with a particular ID. By default will only show if you have permission to the see the board in question - this can be overriden. function...

Information disclosure

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors...

CVE-2011-4143

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors...

CVE-2011-4143

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors...

CVE-2011-4143

Summary of CVE-2011-4143 : Affected product is RSA enVision 4.x (4.0 SP4 P5 and 4.1 before P3). The issue is an environmental variable information disclosure vulnerability that could allow an unauthenticated, remote attacker to obtain sensitive details about the environment variables in the web s...

CVE-2011-4143: Exposure of Sensitive Information to an Unauthorized Actor

EMC RSA enVision 4.0 before SP4 P5 and 4.1 before P3 allows remote attackers to obtain sensitive information about environment variables in the web system via unspecified vectors...

Encomposs web system CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Details & Title title : Encomposs web system CMS sql injection vulnerability Author : H3X Credit : Sepehr Security Team Vulnerable Page : departments.php Google Dork : inurl:departments.php?id= Affected Software :Encomposs web system CMS &...

Encompass Web System CMS SQL Injection

Details & Title title : Encomposs web system CMS sql injection vulnerability Author : H3X Credit : Sepehr Security Team Date : 2011-03-25 Vulnerable Page : departments.php Google Dork : inurl:departments.php?id= Affected Software :Encomposs web system CMS & http://www.encompasswebsystems.com...

[SECURITY] [DSA-2046-1] New phpgroupware packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2046-1 [email protected] http://www.debian.org/security/ Giuseppe Iuculano May 13, 2010 http://www.debian.org/security/faq -...

Cmsez(with easy)the whole Station system of 0day-vulnerability warning-the black bar safety net

零 客 网络 安全 小组 www.0kee.com”or in a super-connected in the manner indicated ---------------------------------Ash is often not slutty cut the JJ line------------------------------- Program name: Cmsez Web Content Manage System v2. 0. 0 Vulnerability found: the little handsomehandsome Published time:...