CompactCMS 1.4.0 - 'tiny_mce' Arbitrary File Upload

Title: CompactCMS 1.4.0 tinymce Remote File Upload Vendor: http://www.compactcms.nl/ AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability52.htm Thanks: r3dm0v3, pejvak,...

JE Ajax Event Calendar - Local File Inclusion

JE Ajax Event Calendar - Local File Inclusion Exploit Title: JE Ajax Event Calendar Local File Inclusion Vulnerability Date: 14.05.2010 Author: Valentin Category: webapps/0day Version: 1.0.3 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::...

Joomla JE Ajax Event Calendar 1.0.3 Local File Inclusion

Exploit Title: JE Ajax Event Calendar Local File Inclusion Vulnerability Date: 14.05.2010 Author: Valentin Category: webapps/0day Version: 1.0.3 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = J...

Joomla Manager 1.5.3 SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...

Joomla iProperty 1.5.3 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Joomla...

Joomla! Component com_manager 1.5.3 - 'id' SQL Injection

----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site : http://MiXaTy.com Date : April, 15-2010 Locati...

Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion

----------------------------------------------------------------------------------------- Joomla Component Foobla Suggestions Local File Inclusion ----------------------------------------------------------------------------------------- Author : Chip D3 Bi0s Email : chipdebiosalt+64gmail.com Date...

SA-CONTRIB-2010-036 - Views - multiple vulnerabilities

The Views module provides a flexible method for Drupal site designers to control how lists of content are presented. Views accepts parameters in the URL and uses them in an AJAX callback. The values were not filtered, thus allowing injection of JavaScript code via the AJAX response. A user tricke...

Sql injection

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-4727

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-4727

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-4727

CVE-2009-4727 details a SQL injection in JungleScripts Ajax Short Url Script, affecting the x/login path via the username parameter. The Vulnerability is described as allowing remote attackers to execute arbitrary SQL commands, signaling a potentially high impact. The NVD entry assigns a CVSS v2 ...

CSICE Cross Site Request Forgery / Cross Site Scripting

http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the Post comment filelds in the following page move to this page 'only for authenticated user' http://www.csice.org/student/subjects.html and choose a subject and...

CSICE XSS and CSRF Vulnerability

Exploit for unknown platform in category web applications ================================ CSICE XSS and CSRF Vulnerability ================================ http://www.csice.org/ Suffers from XSS and CSRF cross site scripting and cross site request forgery attacks. The vulnerability lies in the...

LiveStreet v0.2 Xss Vulnerability

Exploit for unknown platform in category web applications ================================= LiveStreet v0.2 Xss Vulnerability ================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

UBUNTU-CVE-2010-0288

A typo in the administrator permission check in the ACL Manager plugin plugins/acl/ajax.php in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager eventmanagement, Game Article DB gamearticledb, Simple career mlcareer, Surprise Calendar mlsurprisecalendar, Search Api Ajax Google searchajaxgoogle, Download Manager sprdownloadmanager Release...

Ajax Manset Haber Sistemi 3 Administrative Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : LionTurk.Turkblog.com Resmi Web Sitem :D...

dokuwiki 2009-12-25 - Multiple Vulnerabilities

Reported: 13-01-2010 Patched: 13-01-2010 Released: 14-01-2010 Vulnerable version : http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25.tgz Patched version: http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25b.tgz Author: whitesheep Contact: [email protected]...

Max's AJAX File Uploader Shell Upload

| | Max's AJAX File Uploader Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.ajaxf1.com/download.html?dl=12 | | | | Exp : | | 1- Upload Your Shell yourshell.php | | 2- Pwd Your Shell...