NACElink CS Manager - Persistent Web Vulnerability

Document Title: =============== NACElink CS Manager - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=488 Release Date: ============= 2012-05-16 Vulnerability Laboratory ID VL-ID: ==================================== 488 Comm...

LAN Messenger v1.2.28 - Persistent Software Vulnerability

Exploit for windows platform in category local exploits Title: ====== LAN Messenger v1.2.28 - Persistent Software Vulnerability Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= LAN Messenger is a free and open source cross-platform instant...

NACElink CS Manager - Persistent Web Vulnerability

Document Title: =============== NACElink CS Manager - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=488 Release Date: ============= 2012-05-16 Vulnerability Laboratory ID VL-ID: ==================================== 488 Comm...

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Date: ===== 2012-05-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=530 VL-ID: ===== 530 Common Vulnerability Scoring System:...

Havalite CMS v1.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Havalite CMS v1.0.4 - Multiple Web Vulnerabilities Date: ===== 2012-04-23 Introduction: ============= Havalite, a lightweight, open source CMS, based on php and SQLite. It\\\'s licensed under the GNU General Public License. - A...

Microsoft Service Cross Site Scripting

Title: ====== Microsoft Service - Persistent Web Vulnerabilities Date: ===== 2012-04-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=433 http://www.vulnerability-lab.com/getcontent.php?id=439 MSRC ID: 12209nj VL-ID: ===== 433 Introduction: ============= Official...

osCmax Shop CMS 2.5.1 Cross Site Scripting

Title: ====== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=497 VL-ID: ===== 497 Introduction: ============= osCMax is a powerful e-commerce/shopping cart web application. There are many...

idev-QuoteManager 1.0 Cross Site Request Forgery

Exploit Title: idev-QuoteManager 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-quotemanager/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide...

Mvmdesign - Presistent XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

B2Evolution CMS 4.1.3 - Multiple Web Vulnerabilities

Document Title: =============== B2Evolution CMS 4.1.3 - Multiple Web Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=482 Release Date: ============= 2012-03-28 Vulnerability Laboratory ID VL-ID: ==================================== 482 Produc...

Fixed XSS vulnerability at www.blender3d.org

Security researcher r14nul, has submitted on 23/02/2012 a cross-site-scripting XSS vulnerability affecting www.blender3d.org, which at the time of submission ranked 193040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2015. It is...

F*EX 20100208/20111129-2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52085/info FEX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-base...

Unfixed XSS vulnerability at www.pontarlier-zoom.fr

Security researcher Atmon3r, has submitted on 15/02/2012 a cross-site-scripting XSS vulnerability affecting www.pontarlier-zoom.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Tube Ace (Adult PHP Tube Script) - SQL Injection

Exploit Title: Tube AceAdult PHP Tube Script SQL Injection Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Tube Ace http://www.tubeace.com Tested on: Linux Dork: "?viewStandard=0" Comment Greetz: Hernan Jais...

Dinama SMS Service - Persistent Web Vulnerability

Document Title: =============== Dinama SMS Service - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=417 Release Date: ============= 2012-02-04 Vulnerability Laboratory ID VL-ID: ==================================== 417 Produ...

Unfixed XSS vulnerability at www.seyne-immobilier.com

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.seyne-immobilier.com, which at the time of submission ranked 7391990 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2012. It ...

Hitachi IT Operations Director Cross-Site Scripting Vulnerability

Overview Hitachi IT Operations Director contains a cross-site scripting vulnerability. Impact A remote attacker could inject arbitrary web script or HTML. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

Hitachi IT Operations Analyzer Cross-Site Scripting Vulnerability

Overview Hitachi IT Operations Analyzer contains a cross-site scripting vulnerability. Impact A remote attacker could inject arbitrary web script or HTML. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

DeutschePost Website - Non Persistent Web Vulnerability

Document Title: =============== DeutschePost Website - Non Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=261 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 261...

DeutschePost Website - Non Persistent Web Vulnerability

Document Title: =============== DeutschePost Website - Non Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=261 Release Date: ============= 2012-01-26 Vulnerability Laboratory ID VL-ID: ==================================== 261...