BookNux 0.2 <= Multiple Vulnerabilities

BookNux 0.2 = Multiple Vulnerabilities Discovered by: Jean Pascal Pereira [email protected] Vendor information: "Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be integrable, customizable and secure."...

GuestBook Scripts PHP v1.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites Common Vulnerability Scoring System: ==================================== 7.5 Introduction: ============= GuestBook Script PHP is a script that is very easy to install,...

DEBIAN-CVE-2011-4957

The makeclickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service crash via a comment with a crafted URL that triggers many recursive calls...

CVE-2011-4957

The makeclickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service crash via a comment with a crafted URL that triggers many recursive calls...

CVE-2012-2716

Cross-site request forgery CSRF vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments...

CVE-2012-2716

CVE-2012-2716 is a CSRF vulnerability in the Drupal Comment Moderation module (6.x-1.x) prior to 6.x-1.1. The issue stems from insufficient protection of the publish link URL, allowing remote attackers to perform actions as an administrative user to publish comments. Vulnerable component: Comment...

Commentics 2.0 - Multiple Vulnerabilities

Commentics 2.0 - Multiple Vulnerabilities Commentics 2.0 Vendor information: "Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be integrable, customizable and secure." Vendor URI: http://www.commentics.org...

Commentics 2.0 - Multiple Vulnerabilities

Commentics 2.0 Vendor information: "Commentics is a free, advanced PHP comment script with many features. Professionally written and with open source code, its main aims are to be integrable, customizable and secure." Vendor URI: http://www.commentics.org/ Issues: Cross Site Scripting, Cross Site...

Wordpress Plugins - Comment Extra Fields Shell Upload Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Comment Extra Fields Shell Upload Vulnerability Version : 1.7 Link : http://wordpress.org/extend/plugins/comment-extra-field/ Plugins : http://downloads.wordpress.org/plugin/comment-extra-field.1.7.zip Date :...

WordPress Comment Extra Fields Shell Upload

Description : Wordpress Plugins - Comment Extra Fields Shell Upload Vulnerability Version : 1.7 Link : http://wordpress.org/extend/plugins/comment-extra-field/ Plugins : http://downloads.wordpress.org/plugin/comment-extra-field.1.7.zip Date : 30-05-2012 Google Dork :...

Chrome 18 Anti-XSS Bypass

Exploit Title: Chrome 18 anti-XSS bypass Date: 2012-05-31 Author: k3170makan Vendor or Software Link: download link if available Version: 18.0.1025.162 Category:: local Google dork: N/A Tested on: Ubuntu 10.04 Demo site: N/A Chrome 18---and possibly 19--- versions anti-XSS filter or XSSAuditor as...

SA-CONTRIB-2012-087 - Comment Moderation - Cross Site Request Forgery

This module enables you to moderate comments in an accelerated way, by providing a complete interface and all useful actions in a unique page. The module doesn't sufficiently protect the publish link URL, thus a Cross Site Request Forgery CSRF attack against an administrator could result in...

NewsAdd <=1.0 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: NewsAdd =1.0 Multiple SQL Injection Google Dork: ----------------------------------- Date: 2012/05/29 Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/3tCyUs1JeL1M/newsadd--mysql Version: 1.0 Tested on: Debian...

Wordpress 3D cubes Theme XSS Vulnerability

Exploit for php platform in category web applications +-----------------------------------------------------------+ Exploit Title : Title: XSS Vulnerability In Wordpress 3D cubes Theme Software Link : http://test.qualitywordpress.com/wp-content/themes/3dcubes/images/download.zip Date : 27/05/2012...

Authentication flaw

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

CVE-2011-5090

GR Board aka grboard 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to 1 modrewrite.php, 2 commentwriteok.php, 3 poll/index.php, 4 update/index.php, 5 trackback.php, or 6 an arbitrary...

WikkaWiki 1.3.2 Spam Logging PHP Injection

Exploit for php platform in category web applications This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

WikkaWiki 1.3.2 Spam Logging PHP Injection

This module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, thi...

Facebook Anti-Troll System Snagging Ordinary Users

Complaints rang far and wide last week after an automated system for spotting inappropriate Facebook comments began blocking legitimate posts by the social network’s users, including prominent members like Robert Scoble. Facebook users of all stripes have received warnings about posting...