Webify Blog - Arbitrary File Deletion

Webify Blog - Arbitrary File Deletion !x! Informations: Name : Webify Blog Download : http://www.webify.ws/blog Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Delete Arbitrary...

Webify Blog - Arbitrary File Deletion

!x! Informations: Name : Webify Blog Download : http://www.webify.ws/blog Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Delete Arbitrary File Vulnerability you can delete file...

CVE-2011-5140

Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to a tags.php, b list.php, c index.php, d mainindex.php, e viewpost.php, f archive.php, g control/approvecomments.php, h...

Sql injection

Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to a tags.php, b list.php, c index.php, d mainindex.php, e viewpost.php, f archive.php, g control/approvecomments.php, h...

CVE-2011-5140

Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to a tags.php, b list.php, c index.php, d mainindex.php, e viewpost.php, f archive.php, g control/approvecomments.php, h...

CVE-2011-5140

Affected software: DiY-CMS blog module 1.0. Vulnerability type: SQL injection at multiple endpoints via the start parameter (tags.php, list.php, index.php, main_index.php, viewpost.php, archive.php) and via month/year parameters to archive.php; also affects control/approve_comments.php, control/a...

Thinksns microblogging system injection vulnerability a gold-bug warning-the black bar safety net

Author: Liuker Blog: www.2bhack.net I recently nothing to do Don't ask me how the audit of the color of the pen don't know what is audit? Visually it is a few friends have seen me audit the code time to give them a screenshot Just get some. In a few days and then engage in several section of the...

JRE remote code execution 0DAY-vulnerability warning-the black bar safety net

Warning: this site provides programmethodmay carry offensive,for security research and teaching purposes,at your own risk! // // CVE-2 0 1 2-XXXX Java 0day // // reported here: http://blog.fireeye.com/research/2012/08/zero-day-season-is-not-over-yet.html // // secret host / ip : ok.aa24.net /...

Inherit Edit Restrictions for Child Pages

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-26446. panel As it said in Documentation for Page Restrictions|https://confluence.atlassian.com/display/DOC/Page+Restrictions:...

Inherit Edit Restrictions for Child Pages

As it said in Documentation for Page Restrictions|https://confluence.atlassian.com/display/DOC/Page+Restrictions: quote'Edit' restrictions are not inherited from the parent page, only from the space. In a space, the 'Add Pages' permission governs both the creation and the editiing of pages. See...

MTV.com Cross Site Scripting

Exploit Title: MTV XSS Date: 29.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://www.mtv.com/global/mobile/widgets/mobileweb.jhtml?url=XSS http://m.mtv.com&css="alert"TayfunBasoglu"...

Disqus Blog Comments - Blind SQL Injection

Disqus Blog Comments - Blind SQL Injection :----------------------------------------------------------------------------------------------------------------------------------------: Blog Comments Powered By Disqus - Sql Injection...

Disqus Blog Comments Blind SQL Injection Vulnerability

Exploit for php platform in category web applications :----------------------------------------------------------------------------------------------------------------------------------------: Blog Comments Powered By Disqus - Sql Injection...

Disqus Blog Comments SQL Injection

:----------------------------------------------------------------------------------------------------------------------------------------: Blog Comments Powered By Disqus - Sql Injection...

Disqus Blog Comments - Blind SQL Injection

:----------------------------------------------------------------------------------------------------------------------------------------: Blog Comments Powered By Disqus - Sql Injection...

JPM Article Blog Script 6 - tid Cross-Site Scripting

JPM Article Blog Script 6 - tid Cross-Site Scripting source: https://www.securityfocus.com/bid/55112/info JPM Article Blog Script 6 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

JPM Article Blog Script 6 - 'tid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/55112/info JPM Article Blog Script 6 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

AMD Blog Hacked, Database leaked on Internet

A team of Hackers called, "r00tBeer Security Team" today hack into official blog of Advanced Micro Devices AMD which is a American multinational semiconductor company. AMD is the second-largest global supplier of microprocessors based on the x86 architecture and also one of the largest suppliers ...

JPM Article Blog Script 6 Cross Site Scripting

Application Name : JPM Article Blog Script vulnerable Type : XSS Vuln. Bug Fix Advice : Fixable characters author : Mr.0c3aN Demo : color=0066cchttp://www.jpmalloy.com/forum/index.php?tid=4 ’alertMr.0c3aNocean Application Home Page : color=0066cchttp://www.jpmalloy.com ’"alert"Mr.0c3aN"ocean Emai...

ProQuiz 2.0.2 - Multiple Vulnerabilities

Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: [email protected] Vendor Homepage: http://proquiz.softon.org/ Software Link: http://code.google.com/p/proquiz/downloads/list Tested on: Linux/Windows 1-...