OpenMRS 2.3 (1.11.4) – Multiple Cross-Site Scripting Vulnerabilities
OpenMRS 2.3 (1.11.4) Multiple Cross-Site Scripting Vulnerabilities
xml
xml 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
OpenMRS 2.3 (1.11.4) – XML External Entity Processing
#!/usr/bin/env python
SAP NetWeaver < 7.01 - XML External Entity Injection
Title: SAP Netwaver - XML External Entity Injection
Qlikview 11.20 SR11 – Blind XML External Entity Injection
Exploit Title: Qlikview blind XXE security vulnerability
Magento eCommerce – Remote Code Execution
##################################################################################################
Aruba Mobility Controller 6.4.2.8 – Multiple Vulnerabilities
# Title: Aruba Mobility Controller CSRF And XSS Vulnerabilities
Pimcore CMS Build 3450 – Directory Traversal
Vulnerability title: Directory Traversal/Configuration Update In Pimcore CMS
HP WebInspect 10.4 – XML External Entity Injection
# Exploit Title: HP WebInspect - XML External Entity
IBM Websphere Portal – Persistent Cross-Site Scripting
IBM WebSphere Portal Stored Cross-Site Scripting Vulnerability [CVE-2014-0910]
Citrix Netscaler NS10.5 – WAF Bypass (Via HTTP Header Pollution)
# Exploit Title: [Citrix Netscaler NS10.5 WAF Bypass via HTTP Header Pollution]
Pentaho < 4.5.0 - User Console XML Injection
========================================================================
Proticaret E-Commerce Script 3.0 – SQL Injection (2)
Document Title:
SquidGuard 1.4 – Long URL Handling Remote Denial of Service
source: https://www.securityfocus.com/bid/55291/info