LoveCMS 1.6.2 - CSRF Code Injection Vulnerability

No description provided by source. Exploit Title : LoveCMS 1.6.2 - CSRF Code Injection Vulnerability Script : LoveCMS 1.6.2 Language : PHP Download : http://sourceforge.net/project/showfiles.php?groupid=168535 Date : 2010/12/27 Dork : Powered by LoveCMS Found : by hiphop contact me...

PHPSelect Submit-A-Link HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17348/info Submit-A-Link is prone to an HTML-injection vulnerability. The script fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code woul...

Cpanel 11.x - Edit E-mail Cross Site Request Forgery exploit

No description provided by source. Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 -------------------------------------------------------------------------------------- form onsubmit=return...

e107 0.7.5 Subject field HTML injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18560/info The e107 CMS is prone to an HTML-injection vulnerability. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site whe...

2DayBiz Matrimonial Script SQL Injection and Cross Site Scripting

No description provided by source. $------------------------------------------------------------------------------------------------------------------- $ 2daybiz Matrimonial Script SQL Injection and Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download :...

Mambo com_koesubmit 1.0.0 - Remote File Inclusion

No description provided by source. Mambo comkoesubmit 1.0.0 Remote File Inclusion Author : Don Tukulesto rootatindonesiancoderdotcom Homepage : http://www.indonesiancoder.com Date : Friday, Semptember 18, 2009...

Wordpress all_in_one_carousel Plugin /XSS/CSRF/ Vuln

Exploit : centerbWordpress allinonecarousel Plugin Xss & Csrf Vulnerability /centerbrbr html head titleWordpress allinonecarousel Plugin Xss & Csrf Vulnerability IeDb TeaM/title /headbody form action="http://YourTarget.Com" id="formid" method="post" input name="name"...

WiFiles HD v1.3 iOS - File Include Web Vulnerability

Document Title: =============== WiFiles HD v1.3 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1214 Release Date: ============= 2014-02-21 Vulnerability Laboratory ID VL-ID: ==================================== 1214...

shopex ctl. member. php file SQL injection vulnerability-vulnerability warning-the black bar safety net

Issql injectionvulnerability testing version: shopex-singel-4.8.5.78660 File:\core\shop\controller\ctl.member.php function delTrackMsg if! empty$POST'deltrack' $oMsg = &$this-system-loadModel'resources/msgbox'; $oMsg-delTrackMsg$POST'deltrack'; $this-splash'success',...

Social Site Generator 2.2 - CSRF Add Admin Exploit

Exploit for php platform in category web applications Exploit Title: social generator Remote Add Admin Exploit Date: 02/05/2013 Author: Fallaga Script url:www.socialsitegeneratorscript.com Version: 2.2 Tested on: Windows CVE : Dork: inurl:myprofile.php?userid=MTM= Username: Password:...

Social Site Generator 2.2 - Cross-Site Request Forgery (Add Admin)

Exploit Title: social generator Remote Add Admin Exploit Date: 02/05/2013 Author: Fallaga Script url:www.socialsitegeneratorscript.com Version: 2.2 Tested on: Windows CVE : Dork: inurl:myprofile.php?userid=MTM= Username: Password:...

Multiple Vulnerabilities in KrisonAV CMS

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in KrisonAV CMS, which can be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-Site Scripting XSS vulnerability in KrisonAV CMS: CVE-2013-2712 The vulnerability exists due to...

DEBIAN-CVE-2013-2275

The default configuration for puppet masters 0.25.0 and later in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2, allows remote authenticated nodes to submit reports for other nodes via unspecified vectors...

Microsoft Word UNC Path Injector

This module modifies a .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. It can also create an empty docx file. If emailed the receiver needs to put the document in editing mode before the remote server will be contacted. Preview and read-only mode do not wor...

X-Ray 2.0 - VirusTotal frontent version for Suspicious Files Auto Submit

Raymond announce X-Ray 2.0, a program which is frontend for VirusTotal multi scanner. X-Ray will provide users with automatic submission of files that you think are suspicious to 35 Agnitum, Antiy Labs, Avast, AVG, Avira, Bitdefender, QuickHeal, ClamAV, Comodo, Dr.Web, Emsisoft, ESET, F-Prot,...

CVE-2012-5230

Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...

CVE-2012-5230

Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...

Design/Logic Flaw

Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...

CVE-2012-5230

Unspecified vulnerability in the JE Story Submit comjesubmit component before 1.9 for Joomla! has unknown impact and attack vectors...

CVE-2012-5230

CVE-2012-5230 affects the Joomla! JE Story Submit (com_jesubmit) component prior to 1.9. The connected sources confirm an unspecified vulnerability with unknown impact and attack vectors, anchored by a CVSSv2 base score of 7.5 (HIGH). The affected item is specifically the com_jesubmit integration...