CVE-2011-5179

Cross-site scripting XSS vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter...

Notepad Dog microblogging V3. 6. 1 Build 2 0 A 1 2 0 7 1 8 background to get shell-vulnerability warning-the black bar safety net

Notepad Dog microblogging system, the background presence of design defects that can lead to get backstage access to the shell Version: V3. 6. 1 Build 2 0 a 1 2 0 7 1 8 1. System Tools-data backup-custom backup-select a data amount smaller table-more options-select compress backup...

idev-DigiMall 2.0 Cross Site Request Forgery

Exploit Title: idev-DigiMall 2.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-digimall/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowHide...

idev-MusicShop 2.0 Cross Site Request Forgery

Exploit Title: idev-MusicShop 2.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-musicshop/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide...

idev-Blog 1.0 Cross Site Request Forgery

Exploit Title: idev-Blog 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-blog/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com...

idev-ArticleDirectory 1.0 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: idev-ArticleDirectory 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://www.idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-articledirectory/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com...

PHP Form & Survey Creator CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP Form & Survey Creator CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/php-form-survey-creator/29396/ Category:: webapps Demo : http://web.alumnionline.org/phpScripts/PHPFormCreator/admin/...

Ajax PHP Penny Auction CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Ajax PHP Penny Auction CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/ajax-php-penny-auction-script-software/28039/ Category:: webapps Demo : http://www.vdsdemoajaxphppennyauction.com/admin/...

Ad Manager Pro Cross Site Request Forgery

Exploit Title: Ad Manager Pro CSRF Vuln add admin Author: Jonturk75 Vendor of Software Link: http://www.scripts.com/viewscript/php-text-ad-management/20881/ Category:: webapps Demo site: http://www.scripts-demo.com/admanagerpro/administration/index.php...

Joomla! Component JE Story Submit - index.php Arbitrary File Upload

Joomla! Component JE Story Submit - index.php Arbitrary File Upload source: https://www.securityfocus.com/bid/51657/info The 'comjesubmit' component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplie...

Joomla! Component JE Story Submit - 'index.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/51657/info The 'comjesubmit' component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload...

CVE-2012-0901

Cross-site scripting XSS vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter...

whmcs hosting management system 0day and fix-vulnerability warning-the black bar safety net

First register an id Submitted a ticket as follows...

ewebeditor(PHP) Ver 3.8 present an arbitrary file upload 0day-vulnerability warning-the black bar safety net

titleeWebeditoR3. 8 for php any file on the EXP/title form action=”" method=post enctype=”multipart/form-data” INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" URL:input type=text name=url value=”http://www.sitedirsec.com/ewebeditor/” size=1 0 0br INPUT TYPE=”hidden” name=”aStyle1 2”...

CVE-2010-5022

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

Sql injection

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

CVE-2010-5022

SQL injection vulnerability in the JExtensions JE Story Submit comjesubmit component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the view parameter to index.php...

CVE-2010-5022

CVE-2010-5022 affects Joomla! with the JExtensions JE Story Submit (com_jesubmit) component version 1.4. The vulnerability is an SQL injection in the view parameter to index.php, enabling remote attackers to execute arbitrary SQL commands. This is supported by multiple sources (NVD, Red Hat, CVE ...

x10 Adult Media Script - Persistent Web Vulnerabilities

Document Title: =============== x10 Adult Media Script - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=301 Release Date: ============= 2011-10-31 Vulnerability Laboratory ID VL-ID: ==================================== 301...

MyBB Forum Userbar Plugin (Userbar v2.2) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...