ExponentCMS 2.0.5 Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL...

ExponentCMS 2.0.5 Multiple Vulnerabilities

Exploit for php platform in category web applications Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL...

DSA-2455-1 typo3-src - cross site scripting

Bulletin has no description...

Minerva Infotech CMS 1.0 Blind SQL Injection

Exploit Title: Minerva infotech CMS Blind SQL injection Vulnerability Date: 07/04/2012 Author: Andrea Bocchetti Url : http://www.minervait.com/cms-demo/ CMS : Minerva infotech CMS VERSION : 1.0 Category: webapps Info : Minerva infotech CMS 1.0 is used to create, edit, manage, and publish content ...

[SECURITY] [DSA 2445-1] typo3-src security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2445-1 [email protected] http://www.debian.org/security/ Florian Weimer March 31, 2012 http://www.debian.org/security/faq -...

GENU CMS SQL Injection Vulnerability

Exploit for php platform in category web applications -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- GENU CMS SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by h0rd h0rdatnull.net homepage http://h0rd.net download...

Fedora Update for drupal6 FEDORA-2012-1306

Check for the Version of drupal6 OpenVAS Vulnerability Test Fedora Update for drupal6 FEDORA-2012-1306 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for drupal7 FEDORA-2012-1268

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2012-1268 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Tim Hendriks Content Management System SQL Injection

Exploit Title: Content-Management-System Remote SQL Injection news.php Script Page : http://tim-hendriks.com Date: 24-3-2012 Version: Version 2.1 Author : Ali.Erroor Tested on: Firefox 8.0, Palemoon 8.0, Internet Explorer 9 Mail: [email protected] Web Site : www.anti-network.net Injection Point ...

Fedora Update for drupal7 FEDORA-2011-10020

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2011-10020 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

FlexCMS 3.2.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Dutch News site spread Malware on 100000 Computers

Dutch News site spread Malware on 100000 Computers Dutch popular news site NU.nl appears to be serving Java exploit drive-by malware to users of IE. Nu.nl has approximately one hour long served the Javascript code that attempted to provide visitors to the news site with a trojan to infect. The...

FlexCMS 3.2.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano Binetti...

FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities

FlexCMS 3.2.1 - Multiple Cross-Site Request Forgery Vulnerabilities +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : FlexCMS 3.2.1 Multiple CSRF Date : 16-03-2012 Author : Ivano...

Cycade Gallery - SQL Injection

Exploit Title: Cycade Gallery SQL Injection Exploit Date: 3/12/2012 Author: -DownFall Vendor or Software Link: Cycade Content Management - http://www.cycade.com/ Category: Web Apps - 0-Day Google dork: intext:"Powered by Cycade" inurl:"gid=" Tested on: Windows 7...

Fedora Update for drupal6 FEDORA-2012-1283

Check for the Version of drupal6 OpenVAS Vulnerability Test Fedora Update for drupal6 FEDORA-2012-1283 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for drupal7 FEDORA-2012-1250

Check for the Version of drupal7 OpenVAS Vulnerability Test Fedora Update for drupal7 FEDORA-2012-1250 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RazorCMS 1.2.1 Stable - Cross-Site Request Forgery (Delete Web Pages)

+------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : RazorCMS CSRF Exploit to add ADMIN account/H2...

http-config-backup NSE Script

Checks for backups and swap files of common content management system and web server configuration files. When web server files are edited in place, the text editor can leave backup or swap files in a place where the web server can serve them. The script checks for these files: wp-config.php:...

WebfolioCMS 1.1.4 - Cross-Site Request Forgery (Add AdminModify Pages)

WebfolioCMS 1.1.4 - Cross-Site Request Forgery Add AdminModify Pages +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : WebfolioCMS = 1.1.4 CSRF Add Admin/Modify Pages Date : 28-02-2012 Author : Ivano...