2947 matches found
ChurchCMS 0.0.1 SQL Injection
Exploit for php platform in category web applications Exploit Title: ChurchCMS 0.0.1 'admin.php' Multiple SQLi Author: G13 Twitter: @g13net Software Link: http://sourceforge.net/projects/churchcms/?source=directory Version: 0.0.1 Category: webapps php Description ChurchCMS is the software to plac...
Invoice Manager CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Invoice Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/invoice-manager-by-stivasoft/31738/ Category:: webapps Demo : http://www.phpjabbers.com/demo/im15/admin.php Greetz: Inj3ct0r Explo...
CVE-2012-0995
Multiple cross-site scripting XSS vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter in an external action to zp-core/admin.php, 2 PATHINTO to an unspecified URL, as demonstrated using /1/, 3 PATHINFO to zp-core/admin.php, or 4...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter in an external action to zp-core/admin.php, 2 PATHINTO to an unspecified URL, as demonstrated using /1/, 3 PATHINFO to zp-core/admin.php, or 4...
CVE-2012-1227
The CVE-2012-1227 entry describes CSRF vulnerabilities in pluck 4.7 (admin.php) that could allow an attacker to hijack admin sessions by performing actions such as (1) changing the admin email address, (2) changing the blog title via a settings action, (3) adding a page via editpage, or (4) addin...
CVE-2012-1227: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...
PT-2012-3000
Name of the Vulnerable Software and Affected Versions ZENphoto version 1.4.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the msg parameter in an external action to "zp-core/admin.php", PATH INFO to "zp-core/admin.php", or the albu...
CVE-2012-0995: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in ZENphoto 1.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter in an external action to zp-core/admin.php, 2 PATHINTO to an unspecified URL, as demonstrated using /1/, 3 PATHINFO to zp-core/admin.php, or 4...
CVE-2012-1216
PBBoard 2.1.4 and likely earlier versions have multiple vulnerabilities tied to CVE-2012-1216: a CSRF flaw in admin.php that can hijack administrator sessions to perform actions (e.g., file upload via add action or file content modification via edit action), and it is linked to other issues (CVE-...
CVE-2012-1216: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that 1 upload a file via an add action or 2 change the contents of a file via a dit action...
PT-2012-3139
Name of the Vulnerable Software and Affected Versions PBBoard version 2.1.4 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the admin.php file. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific...
Xoops 2.5.4 - Blind SQL Injection
------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom Tested on: Freebsd 8 and Debian...
CVE-2011-4561
Cross-site scripting XSS vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php. NOTE: some of these details are obtained from third party information...
CVE-2011-4561
Cross-site scripting XSS vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php. NOTE: some of these details are obtained from third party information...
CVE-2011-4561
Cross-site scripting XSS vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php. NOTE: some of these details are obtained from third party information...
CVE-2011-4561
Phorum 5.2.18 is vulnerable to a cross-site scripting (XSS) flaw in admin.php, exploitable by remote attackers via PATH_INFO to admin/index.php. The issue affects Phorum’s admin interface and can allow injection of arbitrary web script or HTML. Multiple sources (NVD/OpenVAS) confirm the vulnerabi...
CVE-2011-4561: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in admin.php in Phorum 5.2.18 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin/index.php. NOTE: some of these details are obtained from third party information...