Lucene search
+L

9398 matches found

exploitpack
exploitpack
•added 2018/11/06 12:00 a.m.•25 views

OOP CMS BLOG 1.0 - Cross-Site Request Forgery (Add Admin)

OOP CMS BLOG 1.0 - Cross-Site Request Forgery Add Admin Exploit Title: OOP CMS BLOG 1.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-06 Exploit Author: Ihsan Sencan Vendor Homepage: http://zsoft.com.bd/ Software Link:...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/11/06 12:00 a.m.•36 views

OOP CMS BLOG 1.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: OOP CMS BLOG 1.0 - Cross-Site Request Forgery Add Admin Dork: N/A Date: 2018-11-06 Exploit Author: Ihsan Sencan Vendor Homepage: http://zsoft.com.bd/ Software Link: https://datapacket.dl.sourceforge.net/project/php-oop-cms-blog/blogforup.zip Version: 1.0 Category: Webapps Tested on...

5.3AI score
SaveExploits0
zdt
zdt
•added 2018/11/02 12:00 a.m.•217 views

Fantastic Blog CMS 1.0 - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/ronald-ronniem/ Software Link:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2018/11/02 12:00 a.m.•28 views

Fantastic Blog CMS 1.0 - id SQL Injection

Fantastic Blog CMS 1.0 - id SQL Injection Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/ronald-ronniem/ Software Link:...

8.7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/11/02 12:00 a.m.•39 views

Fantastic Blog CMS 1.0 - 'id' SQL Injection

Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/ronald-ronniem/ Software Link: https://www.sourcecodester.com/sites/default/files/download/Ronald%20Ronnie/fantasticblog0.zip...

5.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2018/10/29 12:29 p.m.•10 views

CVE-2018-18735

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

8.8CVSS5.8AI score0.00523EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2018/10/29 12:29 p.m.•13 views

CVE-2018-18736

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...

5.4CVSS5.8AI score0.00556EPSS
SaveExploits1References1
NVD
NVD
•added 2018/10/29 12:29 p.m.•26 views

CVE-2018-18735

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

8.8CVSS8.7AI score0.00523EPSS
SaveExploits1References1
NVD
NVD
•added 2018/10/29 12:29 p.m.•26 views

CVE-2018-18736

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...

5.4CVSS5.2AI score0.00556EPSS
SaveExploits1References1
Prion
Prion
•added 2018/10/29 12:29 p.m.•23 views

Cross site scripting

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...

3.5CVSS5.2AI score0.00556EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2018/10/29 12:29 p.m.•24 views

Cross site request forgery (csrf)

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

6.8CVSS8.6AI score0.00523EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2018/10/29 12:00 a.m.•16 views

catfish blog cross-site scripting vulnerability

Catfish blog is a set of open source blog system developed using the PHP language . A cross-site scripting vulnerability exists in Catfish blog version 2.0.33. A remote attacker can exploit this vulnerability to inject code...

5.4CVSS5.4AI score0.00556EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/10/29 12:00 a.m.•14 views

catfish blog cross-site request forgery vulnerability

Catfish blog is a set of open source blog system developed using the PHP language . A cross-site request forgery vulnerability exists in admin/Index/tiquan in Catfish blog version 2.0.33. A remote attacker can exploit this vulnerability to change the user type...

8.8CVSS8.9AI score0.00523EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2018/10/28 10:41 p.m.•18 views

native-phrase-blog.com XSS vulnerability

Open Bug Bounty ID: OBB-691828 Description| Value ---|--- Affected Website:| native-phrase-blog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

0.1AI score
SaveExploits0
Cvelist
Cvelist
•added 2018/10/28 3:00 a.m.•33 views

CVE-2018-18735

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

8.7AI score0.00523EPSS
SaveExploits1References1
CVE
CVE
•added 2018/10/28 3:00 a.m.•60 views

CVE-2018-18736

CVE-2018-18736 corresponds to an XSS vulnerability in catfish blog 2.0.33 (described as related to “write source code”). Affected component: catfish blog (version 2.0.33). Root cause details are not fully specified in the provided documents beyond the XSS note. Potential impact is cross-site scri...

5.4CVSS5.2AI score0.00556EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2018/10/28 3:00 a.m.•36 views

CVE-2018-18736

An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."...

5.3AI score0.00556EPSS
SaveExploits1References1
CVE
CVE
•added 2018/10/28 3:00 a.m.•54 views

CVE-2018-18735

CVE-2018-18735 describes a cross-site request forgery in Catfish Blog 2.0.33, specifically in the admin/Index/tiquan functionality. The CVE entry notes a CSRF vulnerability that could allow an attacker to affect user roles (e.g., change user type) given the documented access path. From the initia...

8.8CVSS8.6AI score0.00523EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/28 12:00 a.m.•7 views

CVE-2018-18735: Cross-Site Request Forgery (CSRF)

A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33...

8.8CVSS7.8AI score0.00523EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/10/28 12:00 a.m.•7 views

PT-2018-14613

Name of the Vulnerable Software and Affected Versions catfish blog version 2.0.33 Description A CSRF issue was discovered in the admin/Index/tiquan endpoint of the catfish blog. Recommendations For catfish blog version 2.0.33, update to a version that includes a fix for this issue, if available. ...

8.8CVSS0.00523EPSS
SaveExploits1References2
Rows per page
Query Builder