bpmcdevitt/exploit-db-mirror
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

DB: 2016-05-21

Browse source
This commit is contained in:
Offensive Security 2016-05-21 05:05:57 +00:00
parent a447a01cb8
commit 931bae6679
5 changed files with 5 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
files.csv
View file

@ -26702,8 +26702,8 @@ id,file,description,date,author,platform,type,port
29658,platforms/php/webapps/29658.txt,"PhotoStand 1.2 Index.php Cross-Site Scripting Vulnerability",2007-02-24,"Simon Bonnard",php,webapps,0
29659,platforms/windows/dos/29659.pl,"Microsoft Windows XP/2003 Explorer WMF File Handling Denial of Service Vulnerability",2007-02-25,sehato,windows,dos,0
29660,platforms/windows/dos/29660.txt,"Microsoft Office 2003 - Denial of Service (DoS) Vulnerability",2007-02-25,sehato,windows,dos,0
29661,platforms/php/webapps/29661.txt,"Docebo CMS 3.0.x index.php searchkey Parameter XSS",2007-02-24,ROOT[ATI],php,webapps,0
29662,platforms/php/webapps/29662.txt,"Docebo CMS 3.0.x modules/htmlframechat/index.php Multiple Parameter XSS",2007-02-24,ROOT[ATI],php,webapps,0
29661,platforms/php/webapps/29661.txt,"Docebo CMS 3.0.x index.php searchkey Parameter XSS",2007-02-24,r00t,php,webapps,0
29662,platforms/php/webapps/29662.txt,"Docebo CMS 3.0.x modules/htmlframechat/index.php Multiple Parameter XSS",2007-02-24,r00t,php,webapps,0
29663,platforms/php/webapps/29663.txt,"SolarPay Index.php Local File Include Vulnerability",2007-02-26,"Hasadya Raed",php,webapps,0
29664,platforms/windows/dos/29664.txt,"Microsoft Office Publisher 2007 - Remote Denial of Service (DoS) Vulnerability",2007-02-26,"Tom Ferris",windows,dos,0
29665,platforms/php/webapps/29665.txt,"SQLiteManager 1.2 - Local File Include Vulnerability",2007-02-26,"Simon Bonnard",php,webapps,0

Can't render this file because it is too large.

4
platforms/php/webapps/29661.txt
View file

@ -1,9 +1,7 @@
source: http://www.securityfocus.com/bid/22719/info
Docebo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Docebo 3.0.5 and prior versions are vulnerable; other versions may also be affected.
http://www.example.com/doceboCms/index.php?searchkey=<script>alert('Bella_Italia');</script>
http://www.example.com/doceboCms/index.php?searchkey=<script>alert('XSS');</script>

4
platforms/php/webapps/29662.txt
View file

@ -1,9 +1,7 @@
source: http://www.securityfocus.com/bid/22719/info
Docebo is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Docebo 3.0.5 and prior versions are vulnerable; other versions may also be affected.
http://www.example.com/doceboScs/modules/htmlframechat/index.php?sn=<script>alert('Bella_Italia');</script> http://www.example.com/doceboScs/modules/htmlframechat/index.php?ri=<script>alert('Bella_Italia');</script>
http://www.example.com/doceboScs/modules/htmlframechat/index.php?sn=<script>alert('XSS');</script> http://www.example.com/doceboScs/modules/htmlframechat/index.php?ri=<script>alert('XSS');</script>

2
platforms/php/webapps/29677.txt
View file

@ -4,4 +4,4 @@ Exploiting these issues could allow an attacker to steal cookie-based authentica
Audins Audiens version 3.3 is vulnerable; other versions may also be affected.
http://www.example.com/[path]/setup.php/>"><ScRiPt>alert('Bella_Italia')%3B</ScRiPt>
http://www.example.com/[path]/setup.php/>"><ScRiPt>alert('XSS')%3B</ScRiPt>

2
platforms/php/webapps/4125.txt
View file

@ -9,8 +9,6 @@
# Site: http://sourceforge.net/projects/webdev-webchat/
# Download: http://downloads.sourceforge.net/webdev-webchat/webchat-078.zip?modtime=1046649600&big_mirror=0
# Author: r00t
# Contact: r00t.ati@gmail.com - http://inclusionhunter.altervista.org/index.php
#
#########################################################################