Mantis 0.x/1.0 view_all_set.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...

web calendar system 3.12/3.30 Multiple Vulnerabilities

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...

openSUSE Security Update : ruby19 (openSUSE-SU-2013:0376-1)

ruby19 was updated to fix various bugs and security issues: Update to 1.9.3 p385 bnc802406 - XSS exploit of RDoc documentation generated by rdoc CVE-2013-0256 - for other changes see /usr/share/doc/packages/ruby19/Changelog Update to 1.9.3 p327 bnc789983 - CVE-2012-5371 and plenty of other fixes...

ManageEngine EventLog Analyzer "j_username"跨站脚本漏洞

ManageEngine EventLog Analyzer是安全信息和事件管理软件。 ManageEngine EventLog Analyzer 8.6及其他版本没有正确过滤event/jsecuritycheck 当设置了"jpassword"后的"jusername" GET参数，这可导致在受影响站点用户浏览器会话中执行任意HTML和脚本代码。 0 ManageEngine EventLog Analyzer 8.6 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

PHPJabbers Car Rental脚本多个漏洞

No description provided by source. Car Rental Script - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/car-rental/ ===...

PHPJabbers Job Listing脚本多个漏洞

No description provided by source. Job Listing Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Job Listing Script - Multiple Vulnerabilities

Job Listing Script suffers from cross site request forgery and cross site scripting vulnerabilities. Job Listing Script - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home :...

ecshop最新版本SQL注入+存储XSS=任意管理员登录

简要描述： 一个功能点的SQL注入和存储XSS，内含多种技巧，我觉得我就是个艺术家～～ 详细说明： 刚下的ecshop V2.7.3版本～ 1.漏洞存在于站外广告统计功能对应管理后台的报表统计-站外投放JS，即/affiche.php页面，将from参数网站来源referer存储到了数据库表ecsadsense，而在后台的“站外投放JS”读取出来未过滤又进入了sql语句，导致二次注入。 /affiche.php 119行 $sql = "INSERT INTO " . $ecs-table'adsense' . "fromad, referer, clicks VALUES '-1', ...

Havalite v1.1.7 Mutiple Vulnerabilities

Its Multiple Vulnerabilities found in Havalite 1.1.0 by me old version & oday , and its work/able in the last havalite version v1.1.7 . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

Yahoo Mail Cross-Site Scripting Attack For Sale

A new cross-site scripting exploit that enables attackers to steal cookies and access Yahoo email accounts is for sale in an exclusive underground market for $700, less than half of market value according to the hacker. The attack steals session cookies for Yahoo email and could allow an attacker...

OTRS 3.1 - Persistent Cross-Site Scripting

OTRS 3.1 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: Mike Eduard - Znuny - Enterprise Services for OTRS Product: OTRS Open Technology Real Services Version: 3.1.8, 3.1.9 and 3.1.10 Vendor Homepage: http://otrs.org CVE: 2012-4751 Timeline: 03 Sep 2012: Vulnerability reported + f...

OTRS 3.1 Cross Site Scripting

!/usr/bin/python ''' Author: Mike Eduard - Znuny - Enterprise Services for OTRS Product: OTRS Open Technology Real Services Version: 3.1.8, 3.1.9 and 3.1.10 Vendor Homepage: http://otrs.org CVE: 2012-4751 Timeline: 03 Sep 2012: Vulnerability reported + fix to vendor 04 Sep 2012: Vulnerability...

Viral Membership System Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress bSuite 4.0.7 Cross Site Scripting

Original advisory: http://www.ihteam.net/advisory/bsuite-wordpress-permanent-xss/ WordPress bSuite Add Admin Download link: http://wordpress.org/extend/plugins/bsuite/ Author contact: 29/06/2011 POC published: 11/07/2011 Plugin is out-of-date, last update on 2009, so this is just a POC that show...

PG Newsletter Cross Site Scripting

%+ $...............4.........|.......0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: PG Newsletter persistent XSS vulnerability Vendor: demo.newsletter.pro Author: $4d0//r007k17 a.k.a Raghavendra Karthik D My Blog: http://www.shadowrootkit.wordpress.com Google...

Discuz!多个版本存储型跨站脚本漏洞

No description provided by source...

recordpress 0.3.1 - Multiple Vulnerabilities

recordpress 0.3.1 - Multiple Vulnerabilities ---------------------------------------------------------------- WebApplication : RecordPress 0.3.1 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium ---------------------------------------------------------------- Produc...

Skeletonz CMS - Persistent Cross-Site Scripting

Skeletonz CMS - Persistent Cross-Site Scripting Exploit Title: Xss on skeletonz-simple dynamic cms in the section comments Google Dork: Date: 27/11/10 Author: Jordan Diaz aka Jbyte Software Link: http://orangoo.com/skeletonz/ Version: 1.0 Tested on: Windows xp CVE : The follow xss is located in t...

Orbis 1.0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Orbis 1.0.2 Vulnerability...........Reflected XSS Download................http://www.novo-ws.com/orbis-cms/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...

Bassanonet (scheda.php and elenco.php) XSS Vulnerabilities

Exploit for php platform in category web applications ========================================================== Bassanonet scheda.php and elenco.php XSS Vulnerabilities ==========================================================...