PHP Utility Belt - Remote Code Execution

PHP Utility Belt - Remote Code Execution Exploit Title : PHP utility belt Remote Code Execution vulnerability Author : WICS Date : 8/12/2015 Software Link : https://github.com/mboynes/php-utility-belt Overview: PHP utility belt is a set of tools for PHP developers. Install in a browser-accessible...

Wordpress VideoWhisper Video Presentation plugin XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress plugin videowhisper-video-presentation XSS Vulnerability Vendor or Software Link: https://wordpress.org/plugins/videowhisper-video-presentation/ Google dork: inurl:/wp-content/plugins/videowhisper-video-presentation Th...

Wordpress Plugin Store Locator Plus 4.2.23 Email Injection

如果我们拥有有效的“钥匙”就可以发送邮件给任何人File: store-locator-le\include\send-email.phpif !wpverifynonce$REQUEST'valid','em' die; $messageheaders = "From: "$GET'emailname'"...

innovations-archive.aphp.fr. XSS vulnerability

Open Bug Bounty ID: OBB-86803 Description| Value ---|--- Affected Website:| innovations-archive.aphp.fr. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

prehopitalnecker.aphp.fr. XSS vulnerability

Open Bug Bounty ID: OBB-86795 Description| Value ---|--- Affected Website:| prehopitalnecker.aphp.fr. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

ottpi-archive.aphp.fr. XSS vulnerability

Open Bug Bounty ID: OBB-86620 Description| Value ---|--- Affected Website:| ottpi-archive.aphp.fr. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

omsinc.in XSS vulnerability

Vulnerable URL: http://www.omsinc.in/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15379222 Google Pagerank| 0 VIP...

coorgvacations.in XSS vulnerability

Vulnerable URL: http://coorgvacations.in/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15376895 Google Pagerank| 0...

vayavyalabs.com XSS vulnerability

Vulnerable URL: http://vayavyalabs.com/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Rahul Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1659207 Google Pagerank| 3 VIP...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

CVE-2015-6545

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

CVE-2015-6545

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

CVE-2015-6545

CVE-2015-6545: A CSRF flaw in Cerb (Webgroup Media LLC) affects the ajax.php endpoint, enabling an authenticated attacker to add an administrator account via the saveWorkerPeek action. Affected version(s): Cerb 7.0.3 and likely earlier; fixed in Cerb 7.0.4. Impact: unauthorized creation of admin ...

PT-2015-7294

Name of the Vulnerable Software and Affected Versions Cerb versions prior to 7.0.4 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action in the ajax.php file...

CVE-2015-6545: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

Cerb Cross-Site Request Forgery Vulnerability

Cerb is a fast and flexible web-based business collaboration and automation platform. A cross-site request forgery vulnerability exists in Cerb. The "/ajax.php" script fails to properly validate the origin of incoming HTTP requests. The vulnerability could be exploited to allow an attacker to gai...

Cerb 7.0.3 - Cross-Site Request Forgery

Advisory ID: HTB23269 Product: Cerb Vendor: Webgroup Media LLC Vulnerable Versions: 7.0.3 and probably prior Tested Version: 7.0.3 Advisory Publication: August 12, 2015 without technical details Vendor Notification: August 12, 2015 Vendor Patch: August 14, 2015 Public Disclosure: September 2, 201...

ralphwendel.fr XSS vulnerability

Vulnerable URL: http://www.ralphwendel.fr/wp-admin/admin-ajax.php?action=revsliderajaxactionaction=%3Ch1%3ER3NW4%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cimg%20src=x%20onerror=prompt%28String.fromCharCode%2847,88,83,83,80,79,83,69,68,47%29%29%20/%3E%3C!-- Details: Description| Value ---|--- Patched:| Ye...

essexyouthbuild.co.uk XSS vulnerability

Vulnerable URL: http://essexyouthbuild.co.uk/wp-admin/admin-ajax.php?action=revsliderajaxactionaction=%3Ch1%3ER3NW4%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cimg%20src=x%20onerror=prompt%28String.fromCharCode%2847,88,83,83,80,79,83,69,68,47%29%29%20/%3E%3C!-- Details: Description| Value ---|--- Patched:|...

locksolution4u.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-83581 Description| Value ---|--- Affected Website:| locksolution4u.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...