XSS on Sun Java System Identity Manager 6.0/7.x login page "lang" parameter
Vulnerability found:
11 June 2007
Vendor informed:
18 June 2007
Severity level:
Security Research
Wednesday, 12 December 2007by
Adrian PastorAmir Azam
XSS on Apache HTTP Server 413 error pages via malformed HTTP method
Apache HTTP Server exhibits a vulnerability in handling malformed HTTP methods, leading to potential Cross-Site Scripting (XSS) attacks via the 413 ....
Wednesday, 5 December 2007by
Jan FryRichard BrainAdrian Pastor
Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection
Absolute News Manager.NET 5.1 is found to be vulnerable to multiple security issues, including unauthenticated file retrieval via directory travers ....
Wednesday, 28 November 2007by
Adrian PastorJan Fry
Cross-site Scriptiang (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script
The F5 Networks FirePass 4100 SSL VPN has been identified as vulnerable to Cross-Site Scripting (XSS) attacks through the "my.activation.php3" scri ....
