19 matches found
EUVD-2007-3194
Malware in sbrugna...
WebWiz Products (1.0 , <= 3.06) - Login Bypass SQL Injection Exploits
No description provided by source. !-- Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 : version 1.71 and prior versions webwiz site...
WebWiz Forums Search_form.ASP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16196/info WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
Web Wiz NewsPad Express Edition 1.03 Database File Disclosure
Exploit for php platform in category web applications ============================================================= Web Wiz NewsPad Express Edition 1.03 Database File Disclosure ============================================================= Exploit Title: NewsPad Database Download Vulnerability...
Cross site scripting
Cross-site scripting XSS vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document...
CVE-2007-3202
Cross-site scripting XSS vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document...
CVE-2007-3202
The CVE-2007-3202 entry describes a Cross-site scripting (XSS) vulnerability in the Webwiz rich text editor . An attacker can inject arbitrary script/HTML by sending URL-encoded HTML that uses a frameset where a frame’s SRC points to a JavaScript document. This enables remote exploitation per the...
CVE-2007-3202
Cross-site scripting XSS vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document...
Webwiz vulnerable
Webwiz vulnerable Versiyon: all versions are vulnerable Poc: it's vulnerable because of the rich text editor it accept codes which are dangerous When you hex this code with charcode it accept it and you can deface the topic anywhere using webwiz the code is this frameset cols=100 rows=100 border=...
[Full-disclosure] Advisory:XSS vulnerability on WebWiz Forums <= 6.34 (search_form.asp)
--Security Report-- Advisory:XSS vulnerability on WebWiz Forums = 6.34 searchform.asp --- Date: 08/01/06 07:19 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- About: Via this method the WebWiz Forums = 6.34 are being subjected to an attack namely XSS attack...
webwiz634.txt
--Security Report-- Advisory:XSS vulnerability on WebWiz Forums = 7.01 Regards, From the NWPX team, nuker a.k.a nukedx...
WebWiz Forums - Search_form.asp Cross-Site Scripting
WebWiz Forums - Searchform.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/16196/info WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...
WebWiz Forums - 'Search_form.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16196/info WebWiz Forums is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browse...
kapda-18.txt
KAPDA::18 - WebWiz Products SQL Injection Happy new year ! : KAPDA New advisory Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 :...
WebWiz Products (1.0 , <= 3.06) Login Bypass SQL Injection Exploits
Exploit for unknown platform in category web applications =================================================================== WebWiz Products 1.0 , WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kapda - Security...
[KAPDA::#18] - WebWiz Products SQL Injection
KAPDA::18 - WebWiz Products SQL Injection Happy new year ! : KAPDA New advisory Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 :...
WebWiz Products (1.0 <= 3.06) Login Bypass SQL Injection Exploits
No description provided by source. !-- Vulnerable products : webwiz site news access2000 : vesion 3.06 and prior versions webwiz journal access2000 : version 1.0 webwiz weekly poll access2000 : version 3.06 and prior versions database login access2000 : version 1.71 and prior versions webwiz site...
WebWiz Products 1.0/3.06 - Authentication Bypass / SQL Injection
WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kapda - Security Science Researchers Institute of Iran WebWiz Login Bypass PoC - Database login - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kap...
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection
WebWiz Products 1.03.06 - Authentication Bypass SQL Injection WebWiz Scripts Login Bypass PoC - site news , journal , weekly poll - Kapda s advisory Discovery and exploit by devilbox at kapda.ir Kapda - Security Science Researchers Institute of Iran WebWiz Login Bypass PoC - Database login - Kapd...