2580 matches found
screenshot-redirecter.jsp XSS attach via the afterURL parameter
The screenshot-redirector.jsp does note escape the 'afterURL' URL parameter correctly, leading to an XSS attack vector...
screenshot-redirecter.jsp XSS attach via the afterURL parameter
The screenshot-redirector.jsp does note escape the 'afterURL' URL parameter correctly, leading to an XSS attack vector...
screenshot-redirecter.jsp XSS attach via the afterURL parameter
The screenshot-redirector.jsp does note escape the 'afterURL' URL parameter correctly, leading to an XSS attack vector...
runportleterror.jsp contains XSS hole
The runportleterror.jsp contains an XSS attach vector via the unescaped 'portletKey' URL parameter. The parameter should be escaped properly...
Apache Foundation Hit by Targeted XSS Attack
Combining a cross-site scripting XSS vulnerability with a TinyURL redirect, hackers successfully broke into the infrastructure for the open-source Apache Foundation in what is being described as a “direct, targeted attack.” The hackers hit the server hosting the software that Apache.org uses to i...
Discuz! Cross Site Scripting
hi; All versions of Discuz! have the cross-site vulnerabilities because of the export value of "$referer". Like: Discuz! 7.X Discuz! 6.X Discuz! 5.X Discuz!NT 3.X and so on. There are some htm pages in all versions of Discuz!, that are: /templates/default/attachpay.htm /templates/default/ecrate.h...
Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities
Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are...
CVE-2010-0171
Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting XSS attacks, by using the addEventListener and setTimeo...
Torrent Hoster XSS / Shell Upload
======================================================================================== | Title : Torrent Hoster Remont Upload Exploit | Author : El-Kahina | Home : www.h4kz.com | | Script : Powered by Torrent Hoster. | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | B...
Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)
Tinypug 0.9.5 - Cross-Site Request Forgery Password Change www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation...
Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)
www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Tinypug is a...
WordPress statspressCN 1.9.0 Stored Cross Site Scripting
Exploit Title: Wordpress statspressCN search Keywords stored XSS Date: 21-1-2010 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/statpresscn.1.9.0.zip Version: wordpress3.0.4, StatsCN1.9.0 Tested on: Firefox 3.0.15, , IE 8 Info: This plugin shows you real time statisti...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in PHP Inventory 1.2 allows remote attackers to inject arbitrary web script or HTML via the supid parameter in a suppliers details action...
EzineArticles.com Cross Site Scripting
SecWorm.net - Advisory http://SecWorm.net/ XSS Vulnerability in EzineArticles.com ---------------------------------------------------------------------------- ------ 1. Advisory Information: ---------------------------------------------------------------------------- ------ Title:- Cross Site...
Photokorn 1.542 RFI / XSS / phpinfo() Disclosure
======================================================================================== | Title : photokorn Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 3 | High : 2 | Medi...
Cross site scripting
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection
Exploit for unknown platform in category web applications =================================================================== Micronet SP1910 Data Access Controller UI XSS & HTML Code Injection =================================================================== Exploit: XSS & Html code injection ...
Micronet SP1910 Data Access Controller UI - Cross-Site Scripting HTML Code Injection
Micronet SP1910 Data Access Controller UI - Cross-Site Scripting HTML Code Injection Exploit: XSS & Html code injection in Micronet SP1910 data access controller UI Date: 27-11-2009 Author: K053 Vendor: http://www.micronet.info/modeldetail.aspx?seriesno=6&sno=472 Tested on : Private Networks...
Cross site scripting
The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle 1 HTTP headers and 2 HTML templates, which allows remote attackers to conduct cross-site scripting XSS attacks and HTTP response splitting attacks via vectors related to a...
Whois Server v2 XSS
Exploit for unknown platform in category web applications =================== Whois Server v2 XSS =================== Vuln in : "?query=" cuz when you Search about an domain in the script form you gonna find the typed text Clear ! no encryptiation! so we can use it as xss vuln :p here we got A li...