Log1 CMS writeInfo() PHP Code Injection

This module exploits the "Ajax File and Image Manager" component that can be found in log1 CMS. In function.base.php of this component, the 'data' parameter in writeInfo allows any malicious user to have direct control of writing data to file data.php, which results in arbitrary remote code...

Cross site scripting

Cross-site scripting XSS vulnerability in login-with-ajax.php in the Login With Ajax aka login-with-ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php...

CVE-2012-2759

CVE-2012-2759 affects the WordPress plugin Login With Ajax (aka login-with-ajax). The vulnerability is a cross-site scripting (XSS) flaw in login-with-ajax.php, exploitable via the callback parameter in a lostpassword action to wp-login.php. It concerns versions before 3.0.4.1. Impact stated in t...

CVE-2012-2759

Cross-site scripting XSS vulnerability in login-with-ajax.php in the Login With Ajax aka login-with-ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter in a lostpassword action to wp-login.php...

CVE-2012-2341

Cross-site request forgery CSRF vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files...

CVE-2012-2341

The Drupal Take Control module (6.x-2.x) is affected by a CSRF vulnerability in Ajax requests that manipulate files due to insufficient validation. Versions prior to 6.x-2.2 allow remote attackers to hijack user authentication for these requests. Remediation: upgrade to Take Control 6.x-2.2 (or l...

Login With Ajax - Cross-Site Scripting (XSS)

The Login With Ajax WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Plugin Soundcloud Is Gold 2.1 - width Cross-Site Scripting

WordPress Plugin Soundcloud Is Gold 2.1 - width Cross-Site Scripting source: https://www.securityfocus.com/bid/53537/info The Soundcloud Is Gold plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverag...

Proman Xpress 5.0.1 SQL Injection / XSS

Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Date: ===== 2012-05-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=513 VL-ID: ===== 512 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= Proman...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Introduction: ============= Proman Xpress v5.0.1 is a super project management script coded in PHP & MySQL. It s highly customizable and is used across industries. No Encryption...

Discuz NT multiple versions of a file upload vulnerability-vulnerability warning-the black bar safety net

Affected versions: seems to have affected. Vulnerability file:tools/ajax. aspx Vulnerability analysis:the page where the ajax request, there is no permission validation, visitors to the permissions you can call all the methods, it is dangerous to write, so with the following vulnerabilities. ! Wh...

SA-CONTRIB-2012-075 - Take Control - Cross Site Request Forgery (CSRF)

CVE: CVE-2012-2341 This module enables you to manage your Drupal file-system from within Drupal itself. The module does not sufficiently validate Ajax calls leading to possibility of a Cross Site Request Forgery CSRF attack. This vulnerability is mitigated by the fact that the attacker must be ab...

Discuz NT多个版本文件上传漏洞

简要描述： Discuz NT多个版本文件上传漏洞 文章作者：rebeyond 注：文章首发I.S.T.O信息安全团队，后由原创作者友情提交到乌云-漏洞报告平台。I.S.T.O版权所有，转载需注明作者。 详细说明： 漏洞文件:tools/ajax.aspx 漏洞分析:这个页面里的ajax请求，都没有进行权限的验证，游客权限就可以调用其中的所有方法，很危险的写法，于是有了下面的漏洞。 当filename和upload两个参数同时不为空时，取得input的值，并解密生成uid，然后调用UploadTempAvataruid上传头像，继续跟进方法UploadTempAvatar:...

PT-2012-3667 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.3.1 and earlier Description: The issue is related to the wp create nonce function, which associates a nonce with a user account instead of a user session. This might make it easier for remote attackers to conduct cross-si...

Winds Online SQL Injection

Exploit Title: Winds online test.asp SQL Injection Vulnerability + Author: Cair3x + Team : Ajax Security Team + D0rk : Powered by FLEX360 Exploit Vulnerability Page : test.asp http://target.com/patch/test.asp?Cid=SQL Demo : http://www.netech.org/test.asp?cid=9' Exploit BY : Cair3x...

Fedora 17 : phpMyAdmin-3.5.0-1.fc17 (2012-5599)

Changes for 3.5.0.0 2012-04-07 : - interface Add support for mass prefix change. - display 'up to date' message on main page when current version is up to date - feature Update to jQuery 1.6.2 - search Show/hide db search results - patch Add gettext wrappers around a message - cleanup Remove...

Pritlog v0.821 CMS - Multiple Web Vulnerabilities

Title: ====== Pritlog v0.821 CMS - Multiple Web Vulnerabilities Date: ===== 2012-04-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=534 VL-ID: ===== 534 Introduction: ============= PRITLOG is an extremely simple, small 500K uncompressed and powerful blog system. It...

Fedora 16 : phpMyAdmin-3.5.0-1.fc16 (2012-5624)

Changes for 3.5.0.0 2012-04-07 : - interface Add support for mass prefix change. - display 'up to date' message on main page when current version is up to date - feature Update to jQuery 1.6.2 - search Show/hide db search results - patch Add gettext wrappers around a message - cleanup Remove...

Fedora 15 : phpMyAdmin-3.5.0-1.fc15 (2012-5631)

Changes for 3.5.0.0 2012-04-07 : - interface Add support for mass prefix change. - display 'up to date' message on main page when current version is up to date - feature Update to jQuery 1.6.2 - search Show/hide db search results - patch Add gettext wrappers around a message - cleanup Remove...