Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Narendra Bhati

Narendra Bhati

Security Analyst · Not a member

Narendra Bhati's latest activity

Sunday, November 16 2014
1236 No HTTP Only Flag Allow An Attacker TO Access Cookies Using XSS Attack was updated in Exponent CMS
  • Narendra Bhati
    • Tag set to security
    by Narendra Bhati at 12:02 PM
  • Narendra Bhati
    Narendra Bhati created the ticket at 11:38 AM

    What is HTTP Only Flag - According To OWASP

    If the HttpOnly flag (optional) is included in the HTTP response header, the cookie cannot be accessed through clien...
1237 XSS In Exponent 2.3.1 Manage Page was updated in Exponent CMS
1238 Time Based SQL Injection " User Agent" was updated in Exponent CMS
  • Narendra Bhati
    • Tag set to security
    by Narendra Bhati at 12:01 PM
  • Narendra Bhati
    Narendra Bhati created the ticket at 11:53 AM

    Exponent CMS 2.3.1 - Time Based SQL Injection

    Exploitation - Remotely ( Non Authenticated User Can Exploit It )

    Vulnerable Parameter - User Agent Header

    Payload...
1235 XSS In Exponent 2.3.1 was created in Exponent CMS
1234 Critical CSRF Vulnerability In 2.3.1 was updated in Exponent CMS
  • Narendra Bhati
    Narendra Bhati commented at 10:59 AM

    CSRF HTMl File is attached with this ticked
  • Narendra Bhati
    Narendra Bhati created the ticket at 10:58 AM

    CSRF Vulnerability In Exponent 2.3.1

    What Is CSRF - According To OWASP

    CSRF is an attack which forces an end user to execute unwanted actions on a web applicati...