Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web script or HTML via the title parameter when 1 editing a new blog, 2 adding an album, or 3 editing an album. NOTE: the provenance of this information is unknown; t...

CVE-2010-2698

Multiple cross-site scripting XSS vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web script or HTML via the title parameter when 1 editing a new blog, 2 adding an album, or 3 editing an album. NOTE: the provenance of this information is unknown; t...

Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities

Yappa 3.1.2 - yappa.php Multiple Remote Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/41521/info Yappa Yet Another PHP Photo Album is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user-supplied input. An attacker can...

Joomla Component Music Manager LFI Vulnerability

Exploit for php platform in category web applications ================================================ Joomla Component Music Manager LFI Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

Yappa 3.1.2 - 'yappa.php' Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/41521/info Yappa Yet Another PHP Photo Album is prone to multiple remote command-execution vulnerabilities because it fails to properly validate user-supplied input. An attacker can exploit these issues to execute arbitrary commands within the context of...

Joomla! Component Music Manager - Local File Inclusion

Critical Level : HIGH Vendor Url : http://danieljamesscott.org/software/4-joomla-extensions/4-music-manager.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and my friends :...

TCW PHP Album SQL injection Vulnerabilty

Exploit for php platform in category web applications ======================================== TCW PHP Album SQL injection Vulnerabilty ======================================== Name : TCW PHP Album SQL iNjection Vulnerabilty Critical Level :VERY HIGH vendor URL...

TCW PHP Album - Multiple Vulnerabilities

TCW PHP Album - Multiple Vulnerabilities 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: TCW PHP Album Multiple Vulnerability Vendor...

TCW PHP Album - Multiple Vulnerabilities

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: TCW PHP Album Multiple Vulnerability Vendor url:http://tcwphpalbum.sourceforge.net/ Version:1...

Joomla JE Media Player Local File Inclusion

============================================== Joomla je-media-player LFI Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

Joomla! Component JE Media Player - Local File Inclusion

Joomla! Component JE Media Player - Local File Inclusion Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15....

Joomla! Component JE Media Player - Local File Inclusion

Name : Joomla je-media-player LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/extensions/components/je-media-player.html Google Dork: inurl:/components/je-media-player.html? Price:$15.00 Author : Sid3^effects aKa HaRi special thanks to :...

Joomla Component je-media-player LFI Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component je-media-player LFI Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

Joomla JomSocial 1.6.288 Cross Site Scripting

Exploit Title: Joomla Component JomSocial 1.6.288 Multiple XSS Vulnerabilities Date: 26 March 2010 Author: jdc Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out...

Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities

Joomla! Component JomSocial 1.6.288 - Multiple Cross-Site Scripting Vulnerabilities Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out of the bag... His exploit...

Easybe Music Store SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== Easybe Music Store SQL Injection Vulnerability ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...

Slooze PHP Web Photo Album 0.2.7 - Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\Remote Command Execution Vulnerability 0 0 // 1 1 1 0 0 1 1 0 0 1 1 0 Sn!pEr Team 1 1 0...

Slooze PHP Web Photo Album 0.2.7 - Command Execution

Slooze PHP Web Photo Album 0.2.7 - Command Execution 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\Remote Command Execution Vulnerability 0 0 // 1 1 1 0 0 1 1 0 0 1 1 0 Sn!pEr Team 1 1 0...

Friendster.com Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability

Exploit for php platform in category web applications ================================================================= Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability ================================================================= + Site : www.v4-team.com/cc and...