Thomas Liam Romanis - Security Researcher - Exploit Intelligence Platform

CVE-2005-0548 EXPLOITDB WRITEUP

Solaris AnswerBook2 Documentation 1.4.4 - Cross-Site Scripting via Search Function

Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the Search function.

View Code

CVE-2005-0549 EXPLOITDB text WORKING POC

Solaris AnswerBook2 < 1.4.4 - Cross-Site Scripting via View Log Files Function

Cross-site scripting (XSS) vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function.

View Code

CVE-2006-3101 EXPLOITDB text WORKING POC

Cisco Secure ACS for UNIX 2.3 - XSS

Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.

View Code