3697 matches found
Jarida 1.0 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Jarida 1.0 SQL Injection Date : 26 September 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/jarida/ Version : 1.0 Tested on : CentOS 5.6 0...
M Number of the article management system of 0day-vulnerability warning-the black bar safety net
!-- include file="include/head. asp" - 1 4.& lt;!-- include file="include/ubb2html. asp" - 1 5.& lt;% 1 6. Dim...
WordPress Plugin iCopyright(R) Article Tools 1.1.4 - SQL Injection
WordPress Plugin iCopyrightR Article Tools 1.1.4 - SQL Injection Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'";...
WordPress iCopyright(R) Article Tools plugin <= 1.1.4 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'"; 0day.today 2018-01-03...
WordPress iCopyright Article Tools 1.1.4 SQL Injection
Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'";...
WordPress Plugin iCopyright(R) Article Tools 1.1.4 - SQL Injection
Exploit Title: WordPress iCopyrightR Article Tools plugin getresults"SELECT FROM $posttable JOIN $usertable on $posttable.postauthor=$usertable.ID WHERE $posttable.ID = '$icopyrightpostid'";...
AlstraSoft E-Friends Social Networking Script Cross Site Scripting
Exploit Title: AlstraSoft E-Friends Social Networking Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: Article Modules Exploit: "/ POC:...
CentOS Update for httpd CESA-2010:0168 centos5 i386
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux kernel 3.0 - 343 changes made by Microsoft developer K. Y. Srinivasan
Linux kernel 3.0 - 343 changes made by Microsoft developerK. Y. Srinivasan Linux Kernal Change Logs figures were published on Thursday in an LWN.net article : 343 Changes made by Microsoft developer K. Y. Srinivasan 1,085 change provided by independent developers Red Hat provided 1,000 Changes in...
vBulletin CMS 4.1.1 Recent Articles Cross Site Scripting
============================================================ vBulletin 4 CMS Recent Articles widget XSS Vulnerability ============================================================ Title : vBulletin 4 CMS Recent Articles widget XSS Vulnerability Software : http://www.vbulletin.com Tested on : versi...
NO. 0 0 1 school website management system Build 1 1 0 6 2 8 injection vulnerability-vulnerability warning-the black bar safety net
NO. 0 0 1 school website management system modules: 1. Administrator information:website basic information setting, the principal mailbox, etc., database backup,user management, departments and permissions management, etc. 2. School profile:the level of classification, you can add a campus...
Fire article back office management system V2. 1 cookie injection-vulnerability warning-the black bar safety net
Publishing author: dark-on formula Vulnerability type: cookie injection Vulnerability Description: The fire article back office management system V2. 1 program using a common anti-injection procedures, only the post get to filter lead to a cookie injection vulnerability. Vulnerability analysis:...
dedecms 5.7 the background to get SHELL vulnerability-vulnerability warning-the black bar safety net
Vulnerability description: dedecms 5.7 teach the previous version has been greatly improved, fix for 5. 6 The following version serious uploaded 0day; quite tasteless, the premise is to have background permissions. Since the system comes with a file Manager Plug-In does not filter the file upload...
DiscuzX1.5 门户管理权限SQL注入漏洞
简要描述： DiscuzX1.5 门户管理权限SQL注入漏洞 详细说明： DiscuzX1.5 门户管理权限SQL注入漏洞 详细说明： source\include\portalcp\portalcparticle.php //90行 if$G'gpconver' $converfiles = unserializestripcslashes$G'gpconver'; $setarr'pic' = $converfiles'pic'; $setarr'thumb' = $converfiles'thumb'; $setarr'remote' = $converfiles'remote';...
PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability
PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features include: web based admin, surveys, top page, access stats pag...
DiscuzX1.5 有权限SQL注入BUG
简要描述： DiscuzX1.5 有权限SQL注入BUG 详细说明： source\include\portalcp\portalcparticle.php //90行 if$G'gpconver' $converfiles = unserializestripcslashes$G'gpconver'; $setarr'pic' = $converfiles'pic'; $setarr'thumb' = $converfiles'thumb'; $setarr'remote' = $converfiles'remote'; 可以看出变量 $converfiles 没有...
Phpbuddies arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
Phpbuddies is an open-source article Directory System, Phpbuddies in the presence of arbitrary file upload vulnerability that could result in an attacker access to the web shell. +info: Phpbuddies 0day Arbitrary Upload File Vulnerability Author : Xr0b0t [email protected] Homepage :...
Bitweaver 2.8.1 Cross Site Scripting
exploit title: persistant xss in bitweaver2.8.1 date: 22.o2.2o11 author: lemlajt software : bitweaver @ sourceforge.net version: 2.8.1 tested on: linux cve : PoC : 1. submit an article POST http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/articles/edit.php form-data;...
Bitweaver 2.8.1 - Persistent Cross-Site Scripting
exploit title: persistant xss in bitweaver2.8.1 date: 22.o2.2o11 author: lemlajt software : bitweaver @ sourceforge.net version: 2.8.1 tested on: linux cve : PoC : 1. submit an article POST http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/articles/edit.php form-data;...
Sql injection
Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the 1 article parameter to kb.asp, 2 specific parameter to cart.asp, 3 countrycode parameter to contact.asp, and the 4 srch parameter to search.asp. NOTE: the article...