Feather CMS SQL Injection

Exploit Title : Feather CMS SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.kpsy.net Contact : [email protected] , [email protected] Security Risk : High DorK : "Powered by: Feather Inc"...

Multiple XSS vulnerabilities in All-in-One Event Calendar Plugin for WordPress

Advisory ID: HTB23082 Product: All-in-One Event Calendar Plugin for WordPress Vendor: The Seed Studio Vulnerable Versions: 1.4 and probably prior Tested Version: 1.4 Vendor Notification: 21 March 2012 Public Disclosure: 11 April 2012 Vulnerability Type: Cross-Site Scripting XSS CVE References:...

WordPress All-in-One Event Calendar Plugin Multiple Cross Site Scripting Vulnerabilities

All-in-One Event Calendar plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Koprana CMS SQL Injection

http://www.mediafire.com/?ij9rfpfw6s7uzxf for windows only / load exploits/webapp/omiworldinjection.php set HOST target set MODE 1 for admin accounts/2 for all accounts set FILE save format TXT/SQL exploit !KopranaInjection @ HOST = localhost = Target URL @ PORT = 80 = Target Port @ PATH = / = We...

WordPress Plugin All-in-One Event Calendar 1.4 - box_publish_button.php?button_value Cross-Site Scripting

WordPress Plugin All-in-One Event Calendar 1.4 - boxpublishbutton.php?buttonvalue Cross-Site Scripting source: https://www.securityfocus.com/bid/52986/info All-in-One Event Calendar plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitiz...

WordPress Plugin All-in-One Event Calendar 1.4 - 'agenda-widget.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52986/info All-in-One Event Calendar plugin for WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

PHPWPOS Change Admin User And Password ( All Version )

Exploit for php platform in category web applications author : L3b-r1'z Title : PHPWPOS Change Admin User And Password All Version Dork : allintext: "2006 © Moisés Sequeira http://www.ptwebserve.com/phpwpos" Download : http://sourceforge.net/projects/phpwpos/files/phpwpos/ Contact : email protect...

Utopia News Pro 1.4.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Utopia News Pro 1.4.0 Greetz Dr.WEP , JIKO , ahwak2000 , RENO , ABU NWAF , Dr.HAiL , snc0pe , 020 JaBrOt HaCkEr , alkaseer20 , SadHaCkEr , Cyber Code , aircrack -ng All FriendS...

XML Vulnerability in JIRA

We have identified and fixed a vulnerability in JIRA that results from the way third-party XML parsers are used in JIRA. This vulnerability allows an attacker who is an authenticated JIRA user to execute denial of service attacks against the JIRA server. All versions of JIRA up to and including...

Multiple XSS vulnerabilities in All-in-One Event Calendar Plugin for WordPress

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in All-in-One Event Calendar Plugin for WordPress, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Cross-Site Scripting XSS in All-in-One Event Calendar Plugin for WordPress: CVE-2012-1835 1.1...

Dcommunication SQL Injection

Exploit Title : dcommunication Sql Injection Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.dcommunication.net Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "d...

Toronto Web Design Cross Site Scripting

Exploit Title : Toronto Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.123web.ca/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Toront...

Jhwebstudio Cross Site Scripting

Exploit Title : jhwebstudio Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.jhwebstudio.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork...

starCMS Cross Site Scripting

Exploit Title : starCMS Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.starcms.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "powered ...

CreateVision CMS SQL Injection

!/usr/local/bin/perl Exploit Title: CreateVision CMS Database injection. Description: Virtually none of the variables are not filtered. Google Dork: inurl:artykulprint.php Date: 2012/02/24 Author : Zwierzchowski Oskar Software Link: http://www.createvision.pl/ Version: All Version Security Risk:...

PHPFox Cross Site Scripting

Exploit Title: phpfox xss exploit Google Dork: inurl:powered by phpof Date: 25-02-2012 Author: tRipLeZiX Software Link: http://www.phpfox.com/ Version: allversion Tested on: http://www.tanaogi.com/marketplace/6/debot-was-here/ CVE : exploit xss code tHx to:...

Rocketwebco SQL Injection

Exploit Title : rocketwebco Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.rocketwebco.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "site by rocket web consulting"...

Fink Project Cross Site Scripting

Exploit Title : finkproject Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://finkproject.org/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Expl0iTs :...

Simkom Cross Site Scripting

Exploit Title : simkom Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.simkom.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Expl0iTs :...

EasyWebRealEstate blind defect and repair-vulnerability warning-the black bar safety net

Title: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy Author: H4ckCity Security Team farbodmahini badguest. cnwww. badguest. cn WwW.H4ckCity.Org Software address: www.easywebrealestate.com Affects all version: All Version Testing platform: GNU/Linux Ubuntu - Windows Server - win7 Example...