iScripts SupportDesk txtinteligentsearch parameter cross-site scripting vulnerability

iScripts SupportDesk is a customizable web-based helpdesk software for comprehensive customer support. A cross-site scripting vulnerability exists in iScripts SupportDesk v4.3. The vulnerability can be exploited to conduct a cross-site scripting attack via the txtinteligentsearch parameter in...

WordPress responsive-coming-soon-page plugin cross-site scripting vulnerability (CNVD-2018-01256)

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . responsive-coming-soon-page plugin is used in one of the test system maintenance plugin . A cross-site scriptin...

WordPress E-goi Smart Marketing SMS and Newsletters Forms Plugin Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on PHP and MySQL servers.E-goi Smart Marketing SMS and Newsletters Forms plugin is one of the plugins used in the support of customizable forms...

CVE-2017-18010

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-formegoi.php url parameter...

WordPress PopCash.Net Code Integration Tool plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL servers to set up a personal blog site . PopCash.Net Code Integration Tool plugin is used in one of the code integration tool . A cross-site scripting...

File upload vulnerability in semcms shqk_Admin/SEMCMS_Upfile.php file

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run. Semcms...

HelpDEZk Cross-Site Request Forgery Vulnerability

HelpDEZk is a suite of PHP-based software for managing requests, events. A cross-site request forgery vulnerability exists in admin/home/person/ in HelpDEZk. It allows remote attackers to construct malicious URIs and trick users into parsing them, which can be used to perform malicious actions an...

Drupal cross-site request forgery vulnerability (CNVD-2017-03746)

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site request forgery vulnerability exists in Drupal versions 8.2.x prior to 8.2.7, which stems from the program's failure to protect the administrative path with a...

Domains Marketplace Script 1.1 - Authentication Bypass

Exploit Title: ICDomains-Domains Marketplace Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/domains-marketplace-script.htm Demo: http://icloudcenter.net/demos/icdomains/ Version: 1.1 Tested o...

Fileserve Clone Script - Authentication Bypass

Fileserve Clone Script - Authentication Bypass Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Fileserve Clone Script Script Buy Now: http://www.scriptgiant.com/software/32/fileserve-script Author: Ihsan Sencan Author...

Zeuscart Information Disclosure Vulnerability

ZeusCart is an open source shopping system based on PHP and MySQL designed for small and medium-sized online stores. A security vulnerability exists in ZeusCart version 4. A remote attacker can exploit the vulnerability to obtain configuration information by calling the 'phpinfo' function in admi...

Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln

No description provided by source. ============================================================================================== Web3news = v0.95 PHPSECURITYADMINPATH Remote File Inclusion Exploit ===============================================================================================...

CVE-2012-4231

Cross-site scripting XSS vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject arbitrary web script or HTML via the path parameter...

phpwind帮助中心后台路径

简要描述： phpwind帮助中心后台路径 可暴力破解 混点 rank值 呵呵 详细说明： phpwind帮助中心后台路径 可暴力破解 http://faq.phpwind.net/admin.php 漏洞证明： phpwind帮助中心后台路径 可暴力破解 http://faq.phpwind.net/admin.php...

STC Hosting Script (id) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== STC Hosting Script id Remote SQL Injection Vulnerability ========================================================== Author : KnocKout Thankz.: DaiMon,Equivalent Contact: email protecte...

phpBazar Administrative Disclosure

===================================== phpBazar admin path discloser Vulnerability ===================================== Author :: NetSpy Group :: Aras cyber Army Email :: [email protected] Discover :: 1 july 2010 Critical Lvl :: M Publised :: 22 june 2010 vender :: n/a...

Cru Content CMS remote file disclosure vulnerability

Exploit for unknown platform in category web applications ==================================================== Cru Content CMS remote file disclosure vulnerability ==================================================== "Cru Content" Remote File Download Vulnerability CMS Site:crudigital.com.au...

Southburn Web SQL Injection

southburn Web products.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : southburn Web http://southburn.ca/ .:. Bug Type : Sql...

Southburn Web (products.php) Sql Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Southburn Web products.php Sql Injection Vulnerability ======================================================== .:. Script : southburn Web http://southburn.ca/ .:. Bug Type : Sql...

southburn Web - products.php SQL Injection

southburn Web - products.php SQL Injection .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : southburn Web http://southburn.ca/ .:. Bug Type : Sql InjectionMysql .:. Dork : "Powered by: Southburn" === Exploit ===...