ManageEngine ServiceDesk Plus 8.0 Build 8013 – Multiple Cross-Site Scripting Vulnerabilities
=======================================================================
jsp
jsp 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
CA ARCserve D2D r15 GWT RPC – Multiple Vulnerabilities
# Exploit Title:CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Disclosure and Commands Execution
Oracle Sun GlassFish Enterprise Server – Persistent Cross-Site Scripting
Sense of Security - Security Advisory - SOS-11-009
ManageEngine ServiceDesk 8.0.0.12 – Database Disclosure
# Exploit Title: ManageEngine ServiceDesk 0) {
ManageEngine ServiceDesk Plus 8.0 – Directory Traversal
Google Dork: ie: intitle:ManageEngine ServiceDesk Plus"
BMC Dashboards 7.6.01 – Cross-Site Scripting / Information Disclosure
source: https://www.securityfocus.com/bid/47731/info
BMC Remedy Knowledge Management 7.5.00 – Default Account / Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/47728/info
Cisco Unified Communications Manager 8.5 – ‘xmldirectorylist.jsp’ Multiple SQL Injections
source: https://www.securityfocus.com/bid/47607/info
JBoss Application Server 4.2 < 4.2.0.CP09 / 4.3 < 4.3.0.CP08 - Remote Command Execution
#JBoss AS Remote Exploit
Openedit 5.1294 – Remote Code Execution
#!/usr/bin/python
MeshCMS 3.5 – Remote Code Execution
#!/usr/bin/python
Openfire 3.6.4 – Multiple Cross-Site Request Forgery Vulnerabilities
Title: Multiple CSRF Vulnerabilities in Openfire 3.6.4 Administrative
Openfire 3.6.4 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/45682/info
JCMS 2010 – File Download
#####################################################################################################
Oracle Fusion Middleware 10.1.2/10.1.3 – BPEL Console Cross-Site Scripting
source: https://www.securityfocus.com/bid/43954/info
Computer Associates Oneview Monitor 6.0 – ‘doSave.jsp’ Remote Code Execution
source: https://www.securityfocus.com/bid/42413/info
Apache JackRabbit 2.0.0 – webapp XPath Injection
# Title: Apache JackRabbit webapp XPath Injection
Jira 4.0.1 – Cross-Site Scripting / Information Disclosure
source: https://www.securityfocus.com/bid/42025/info
SAP NetWeaver 6.4/7.0 – ‘wsnavigator’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/41925/info
ORACLE Business Process Management (Process Administrator) 5.7-6.0-10.3 – Cross-Site Scripting
|------------------------------------------------------------------|
IBM Websphere ILOG JRules 6.7 – Cross-Site Scripting
source: https://www.securityfocus.com/bid/41030/info
JForum 2.1.8 – ‘bookmarks’ Module Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/40600/info
RJ-iTop Network Vulnerability Scanner System – Multiple SQL Injections
RJ-iTop Network Vulnerability Scanner System Multiple SQL Injection Vulnerabilities
agXchange ESM – ‘ucquerydetails.jsp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38896/info
agXchange ESM – ‘ucschcancelproc.jsp’ Open Redirection
source: https://www.securityfocus.com/bid/38879/info
ManageEngine ServiceDesk Plus 7.6 – woID SQL Injection
Advisory Name: SQL injection in Manage Engine Service Desk Plus 7.6
Comptel Provisioning and Activation – ‘index.jsp?error_msg_parameter’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38534/info
ARISg 5.0 – ‘wflogin.jsp’ Cross-Site Scripting
source: https://www.securityfocus.com/bid/38441/info
IBM (Multiple Products) – Login Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/38412/info
Omnidocs – SQL Injection
--------------------------------------------------------------------
KnowGate hipergate 4.0.12 – Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/38094/info
Hipergate 4.0.12 – Multiple Vulnerabilities
Permanent XSS: