2583 matches found
Jetbox CMS version 2.1 XSS Attack Vulnerability
netVigilance Security Advisory 29 Jetbox CMS version 2.1 XSS Attack Vulnerability Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from layout. It uses p...
jetboxcms21-xss.txt
netVigilance Security Advisory 29 Jetbox CMS version 2.1 XSS Attack Vulnerability Description: Jetbox CMS is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully separated from layout. It uses p...
clonuswiki-xss.txt
ClonusWiki .5 - Cross-Site Scripting Vulnerability ClonusWiki .5 - Cross-Site Scripting Vulnerability discovered by John Martinelli of RedLevel Security Google d0rk: "ClonusWiki .5" intitle:"ClonusWiki" file index.php - variable query - method get "alert1"...
ClonusWiki 0.5 - 'index.php' HTML Injection
source: https://www.securityfocus.com/bid/24101/info ClonusWiki is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of t...
sbb-xss.txt
netVigilance Security Advisory 20 SonicBB version 1.0 XSS Attack Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the ideal community...
[Full-disclosure] SonicBB version 1.0 XSS Attack Vulnerabilities
netVigilance Security Advisory 20 SonicBB version 1.0 XSS Attack Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the ideal community...
Fixed in Apache Tomcat 5.5.18, 5.0.SVN
Moderate: Cross-site scripting CVE-2006-7195 The implicit-objects.jsp in the examples webapp displayed a number of unfiltered header values. This enabled a XSS attack. These values are now filtered. Affects: 5.0.0-5.0.30, 5.5.0-5.5.17...
[Full-disclosure] Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities
netVigilance Security Advisory 12 Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities Description: Advanced Guestbook is a PHP-based guestbook script. It includes many useful features such as preview, templates, e-mail notification, picture upload, page spanning , html tags...
Cross site scripting
footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting XSS attack, or via the puninclude tag, as demonstrated by use of adminoptions.php to execute PHP code from an uploaded avatar file...
Unfixed XSS vulnerability at www.banverket.se
Security researcher Uber0n, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting www.banverket.se, which at the time of submission ranked 460916 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is current...
quizshock-xss.txt
QuizShock 1.6.1 Cross-Site Scripting Vulnerability QuizShock 1.6.1 Cross-Site Scripting Vulnerabilitydiscovered by John Martinelli alert551660661;"...
deskpro201-xss.txt
DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability DeskPRO v2.0.1 - Cross-Site Scripting Vulnerabilitydiscovered by John Martinelli alert1;"...
blogentry-xss.txt
Blog-Entry: http://www.hboeck.de/item/468 http://www.netbeat.de/bestellen/domaincheck.html?alert1 http://www.netbeat.de/support/kommentare.html?name="alert1 http://www.symlink.ch/users.pl?unickname="alert1 http://www.stuttgart.de/sde/search.php?search=%22alert%281%29...
Horde Webmail Multiple HTML Injection vulnerability
Horde Webmail Multiple HTML Injection vulnerability Horde Groupware Webmail Edition is a free, enterprise ready, browser based communication suite. Users can read, send and organize email messages and manage and share calendars, contacts, tasks and notes with the standards compliant components fr...
WBBlog (XSS/SQL) Multiple Remote Vulnerabilities
======================x=o=r=o=n===================== WBBlog XSS/SQL Multiple Remote Vulnerabilities ======================x=o=r=o=n===================== Bulan: xoron xoron.biz ======================x=o=r=o=n===================== SQL INJ:...
[Full-disclosure] Horde 3.1.4 (RC1) fixes XSS issue
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, a few hours ago, Horde Framework 3.1.4 was released. This stable release as well as a previous development release titled 3.1.4 RC1 fix a script/HTML injection issue which does not require pevious authentication by the victim. By redirecting the...
XSS in [Calendar Express 2 ]
hey guys .. check out this new xss i just found ;P Vulnerable : Calendar Express 2 web : http://www.ci.emeryville.ca.us/calendar, http://www.phplite.com/products/calendarexpress/ XSS : http://127.0.0.1/calendar/search.php?allwords=223E3Cscript3Ealert2827bl4ck27293C2Fscript3E&cid=1&title=1&desc=1...
XSS bug: usernames not HTML-encoded in all places
When signing up for an account, it is possible to enter a username like "fred". Confluence will accept this, and on certain pages, render it as raw HTML to the user, opening the possibility of cross-site scripting XSS attacks. Two places I've spotted the raw HTML so far: - Most prominently, when ...
Yet Another Link Directory v1.0
Yet Another Link Directory v1.0 http://yald.sourceforge.net/ Effected files: yald.php --------------------------- yald.php search box XSS User input isn't sanatized before being generated. In the search box for a PoC put: script src=http://www.youfucktard.com/xss.js/script url:...
EcommerceCorporationOnlineStoreKitmore.php多个安全漏洞 Exploit
No description provided by source. David Sopas Ferreira （[email protected]）提供了如下测试方法： SQL注入: more.php?id='SQL injection here& XSS 攻击: more.php?id=%3Cscript%3Ealertdocument.domain;%3C/script%3E&...