1178 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via 1 the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in 2 blog.php, 3 guestbook.php, or 4 forum.php in codes/. NOTE: some of these...
CVE-2012-6523
Multiple cross-site scripting XSS vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via 1 the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in 2 blog.php, 3 guestbook.php, or 4 forum.php in codes/. NOTE: some of these...
CVE-2012-6523
Multiple cross-site scripting XSS vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via 1 the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in 2 blog.php, 3 guestbook.php, or 4 forum.php in codes/. NOTE: some of these...
CVE-2012-6523
CVE-2012-6523 describes multiple cross-site scripting (XSS) vulnerabilities in w-CMS 2.01. The flaws allow remote attackers to inject arbitrary web script or HTML via: (1) the p parameter in the getMenus function in codes/wcms.php; and (2) the COMMENT parameter in blog.php, guestbook.php, or foru...
PT-2013-1986
Name of the Vulnerable Software and Affected Versions w-CMS version 2.01 Description A directory traversal issue exists in the getContent function in codes/wcms.php, allowing remote attackers to read arbitrary files. This is achieved by including a .. dot dot in the p parameter. Recommendations F...
PT-2013-1987
Name of the Vulnerable Software and Affected Versions w-CMS version 2.01 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the p parameter in the getMenus function in codes/wcms.php, or the COMMENT parameter in blog.php, guestbook.php, ...
CVE-2012-6522: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the getContent function in codes/wcms.php in w-CMS 2.01 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter. NOTE: some of these details are obtained from third party information...
CVE-2012-6523: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in w-CMS 2.01 allow remote attackers to inject arbitrary web script or HTML via 1 the p parameter in the getMenus function in codes/wcms.php; or the COMMENT parameter in 2 blog.php, 3 guestbook.php, or 4 forum.php in codes/. NOTE: some of these...
Samsung Acknowledges Exynos Root Exploit
Samsung downplayed a root exploit vulnerability in some of its Exynos processors, and promised a patch for the flaw, according to a company statement acquired by AndroidCentral. The bug affects devices with Exynos 4210 and 4412 processors and was first made public by an XDA Developers forum membe...
W-Agora 4.2.1 SQL Injection
HTTPCS Advisory : HTTPCS79 Product : w-agora Version : 4.2.1 Date : 2012-08-17 Criticality level : Highly Critical Description : A vulnerability has been discovered in w-agora, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the 'pattern' parameter to...
Safari On iOS Denial Of Service
/PoC for Safari crash discovered by Alberto Ortega @a0rtega, [email protected] http://www.livehacking.com/category/vulnerability/apple-vulnerability/ This PoC written by Larry W. Cashdollar http://vapid.dhs.org @lcashdol This PoC creates an html file to be served out by a normal webserver. It...
w-CMS 2.0.1 CSRF / XSS / File Disclosure / Shell Upload
+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...
w-CMS 2.0.1 - Multiple Vulnerabilities
w-CMS 2.0.1 - Multiple Vulnerabilities +----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1...
w-CMS 2.0.1 - Multiple Vulnerabilities
+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...
Conduit Image Search Engine Cross Site Scripting
TITLE: Conduit Image Search Engine Cross site Scripting vendor: Conduit Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...
Conduit Wibiya Password Recovery Toolbar Cross Site Scripting
TITLE: Conduit wibiya password recovery toolbar Cross site Scripting vendor: Conduit Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...
w-CMS HTML Injection and Local File Include Vulnerabilities
w-CMS is prone to multiple HTML-injection vulnerabilities and a local file-include vulnerability. Exploiting these issues could allow an attacker to execute arbitrary HTML and script code in the context of the affected browser, steal cookie-based authentication credentials, and execute arbitrary...
w-CMS <= 2.0.1 Multiple Vulnerabilities - Active Check
w-CMS is prone to multiple HTML-injection vulnerabilities and a local file include LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
W-CMS 2.01 Cross Site Scripting / Directory Traversal
Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet goel, w4rl0ck.d0wn, Chip, VzAcnY, Razzy, Sayan, Jaggi...
w-CMS 2.01 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet...