PRE PRINTING STUDIO - SQL Injection

PRE PRINTING STUDIO - SQL Injection Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

PRE PRINTING STUDIO - SQL Injection

Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Pre Printing Studio SQL Injection

Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Acal Calendar 2.2.6 - Cross-Site Request Forgery

Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer" Tested on: Windows,Linux Add User Username: Password...

CMS Builder 2.14 Cross Site Scripting

CMS Builder vendor: http://www.interactivetools.com/ Version: CMS Builder 2.14 Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: www.epsilonlambda.wordpress.com Google dork: Website powered by CMS Builder...

Dotclear 2.4.1.2 Cross Site Scripting

Advisory ID: HTB23074 Product: Dotclear Vendor: Dotclear Vulnerable Versions: 2.4.1.2 and probably prior Tested Version: 2.4.1.2 Vendor Notification: 8 February 2012 Vendor Patch: 9 February 2012 Public Disclosure: 29 February 2012 Vulnerability Type: Cross Site Scripting XSS CVE References:...

almnzm 2.4 - Cross-Site Request Forgery (Add Admin)

almnzm 2.4 - Cross-Site Request Forgery Add Admin Title: almnzm 2.4 Priv8 Almnzm 2.4 CSRF Exploit!! Add New Admin :D By: HaNniBaL KsA HK www.r00t-s3c.com UserName: PassWord: E-mail: ! -- NOTE!: The value id'z for admin privileges can be cha...

Fork CMS v.3.2.4 - Multiple Vulnerabilities ( LFI - XSS )

Exploit for php platform in category web applications Exploit Title: Fork CMS v.3.2.4 - Multiple Vulnerabilities Script Page : http://www.fork-cms.com Date: 11-02-2012 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista Reflected Cross-Site...

AoF and CSRF vulnerabilities in D-Link DAP 1150

Hello 3APA3A! I want to warn you about new security vulnerabilities in D-Link DAP 1150 Wi-Fi Access Point and Router. These are Abuse of Functionality and Cross-Site Request Forgery vulnerabilities. This is my third advisory from series of advisories about vulnerabilities in D-Link products. Abus...

D-Link DAP 1150 CSRF / XSS / Denial Of Service

Hello list! I want to warn you about new security vulnerabilities in D-Link DAP 1150 Wi-Fi Access Point and Router. These are Cross-Site Request Forgery, Denial of Service and Cross-Site Scripting vulnerabilities. This is my fourth advisory from series of advisories about vulnerabilities in D-Lin...

CVE-2012-1023

Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

Open redirect

Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter...

4Images 1.7.10 Cross Site Scripting

Exploit Title: 4Images Version: 1.7.10 Admin Panel Multiple Vulnerabilities Script Page : http://www.4homepages.de Date: 31-01-2012 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Mac IE9 - Firefox 9.0 Cross-Site Scripting XSS Vector:...

Parallels H Sphere 3.3 P1 Cross Site Scripting

Title: ====== Parallels H Sphere v3.3 P1 - Multiple Persistent Vulnerabilities Date: ===== 2012-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=392 VL-ID: ===== 392 Introduction: ============= Parallels H-Sphere delivers a multi-server hosting automation solution...

Acidcat ASP CMS 3.5.2 Cross Site Scripting

Exploit Title: Acidcat ASP CMS v 3.5.1 - 3.5.2 Admin Panel - Reflected Cros Site-Scripting XSS Script Page : http://www.acidcat.com Date: 20-01-2012 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 Cross-Site Scripting XSS POC:...

Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities

Document Title: =============== Parallels H Sphere v3.3 P1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=392 Release Date: ============= 2012-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Wordpress uCan Post plugin <= 1.0.09 Stored XSS

Exploit for php platform in category web applications Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC: email protected'"window.alertdocument.cookie...

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting

Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC: [email protected]'"window.alertdocument.cookie Post Title is not sanitized and it's injectable with a...

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC:...

A Web Site 4 All SQL Injection

Exploit Title: A Web Site 4 All Sql Injecti0n Vulnerability Date: 12/01/2012 - 00.36 Author: 3spi0n Software Website: http://www.awebsite4all.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Demo Sites: http://www.panchayats.in/php/showPanchNewsDetails.php?linkid=79%22&newsid=25PhpSQLi...