Cross-Site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scripting XSS attacks. The library does not assign the X-Content-Type-Option option to the nosniff header for all CP requests, allowing a malicious user to conduct cross-site scripting through IE/AJAX requests...

Unrestricted file upload

In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajaxrename.php via the extension parameter, as demonstrated by changing the extension from .jpg to .php...

Escort Marketplace 1.0 - SQL Injection

Escort Marketplace 1.0 - SQL Injection Exploit Title: Escort Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/escort-website Demo: http://escortwebsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...

mantraherbal.in XSS vulnerability

Vulnerable URL:...

CVE-2017-9834

SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watuproquestions parameter in a watuprosubmit action to wp-admin/admin-ajax.php...

Cross site request forgery (csrf)

BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via a crafted newmodulename parameter to backend/addons/ajaxcreate.php. NOTE: this can be exploited via CSRF...

BlackCat CMS Arbitrary File Upload Vulnerability

BlackCat CMS is a PHP5, HTML5 content management system. An arbitrary file upload vulnerability exists in BlackCat CMS version 1.2, which allows remote attackers to upload arbitrary files via the media upload function in backend/media/ajaxupload.php...

Joomla! Component Quiz Deluxe 3.7.4 - SQL Injection

Joomla! Component Quiz Deluxe 3.7.4 - SQL Injection Exploit Title: Joomla! Component Quiz Deluxe 3.7.4 - SQL Injection Dork: N/A Date: 30.08.2017 Vendor Homepage: http://joomplace.com/ Software Link: https://extensions.joomla.org/extensions/extension/living/education-a-culture/quiz-deluxe/ Demo:...

Design flaws in the ajax/Common_Ajax.ashx page of the new startup e-learning system

Online Learning System is an e-learning platform system developed in . A design vulnerability exists in the ajax/CommonAjax.ashx page of Xinqi Online Learning System. The vulnerability exists in ajax/CommonAjax.ashx, which can be exploited by an attacker to construct a specific URL and disclose...

ShopsN v3.0 SQL Injection Vulnerability in Frontend UserSetController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v3.0 front-end UserSetController.class.php file has a SQL injection vulnerability . As the system fails to effectively filter the addressajax function. A remote attacker can exploit the vulnerability to obtain sensitive database information...

FG Joomla to WordPress <= 3.30.0 - XSS in the AJAX Imported

The FG Joomla to WordPress WordPress plugin was affected by a XSS in the AJAX Imported security vulnerability...

Code injection

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11357

CVE-2017-11357 affects Progress Telerik UI for ASP.NET AJAX; RadAsyncUpload input is not properly restricted, enabling remote attackers to upload arbitrary files or trigger code execution. The vulnerability is described as an insecure direct object reference in RadAsyncUpload, with impact stated ...

CVE-2017-11317

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code...

CVE-2017-11317

CVE-2017-11317 affects Telerik Web UI for ASP.NET AJAX prior to R1 2017 and R2 prior to R2 2017 SP2. The issue is a weak encryption/serialization flaw in RadAsyncUpload that enables remote attackers to upload arbitrary files or execute arbitrary code. The root cause is described as a deserializat...

Component Ajax Quiz SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Ajax Quiz component of Joomla! An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker...

Joomla Ajax Quiz 1.8 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Ajax Quiz 1.8 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://webkul.com/ Software Link: https://extensions.joomla.org/extensions/extension/living/education-a-culture/ajaxquiz/ Demo:...