VerliHub Control Panel 1.7e Cross Site Scripting

VerliHub Control Panel - v 1.7e XSS & Iframe Injection Vulnerability http://vhcp.verlihub-project.org -6-05-2009 -Methodman - http://nemesis.te-home.net -Example:- Cross-site scripting vulnerability on login page http://vhcp.com/index.php?page=login&nick="alert"Vulnerable";...

Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities

Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/34856/info Verlihub Control Panel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...

Verlihub Control Panel 1.7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/34856/info Verlihub Control Panel is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

MyBB 1.4.5 Cross Site Scripting

Advisory : “Cross-Site Scripting” vulnerability in MyBB Application: MyBB Vulnerable Versions: alert'xss' http://yourdomain.com/somefile.png must be a valid link to an image file meeting the board settings for avatars. Discussion The XSS renders in all browsers and on various pages inside the myB...

New5starRating 1.0 - '/admin/control_panel_sample.php' SQL Injection

source: https://www.securityfocus.com/bid/34680/info New5starRating is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Studio Lounge Address Book 2.5 - Authentication Bypass

Studio Lounge Address Book 2.5 - Authentication Bypass ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home:...

Studio Lounge Address Book 2.5 Authentication Bypass

----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra7 Aflawa Kamikaz Wa4ri...

Studio Lounge Address Book 2.5 Authentication Bypass Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa ...

Studio Lounge Address Book 2.5 - Authentication Bypass

----------------------------بسم الله الرحمن الرحيم----------------------------- Download: http://www.studiolounge.net/2007/08/17/address-book-25 Software: Studio Lounge Address Book 2.5 author: ThE g0bL!N Home: WWW.h4ckf0ru.com Chi3arona houa : Serra7 merra7 , koulchi mderra7...

Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC

Exploit for unknown platform in category web applications =============================================== Limbo CMS 1.0.4.2 CSRF Privilege Escalation PoC =============================================== Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons...

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery Privilege Escalation Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons Luja download : http://www.limboportal.com/index.php/option/downloads/task/download/id/67 d00rk: intext:"site powered by limbo"...

WebFileExplorer 3.1 - Authentication Bypass

WebFileExplorer 3.1 - Authentication Bypass Product Name: WebFileExplorer Version : 3.1 URL : http://www.webfileexplorer.com/ Price : 99 $ USD Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg WebFileExplorer v3.1, is prone to multiple vulnerabilities. At first, an attacker can injec...

WebFileExplorer 3.1 - Authentication Bypass

Product Name: WebFileExplorer Version : 3.1 URL : http://www.webfileexplorer.com/ Price : 99 $ USD Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg WebFileExplorer v3.1, is prone to multiple vulnerabilities. At first, an attacker can inject his evil sql code in the login form,...

Spywaredb3.2squared.com SQL Injection

Dear Full-Disclosure, Since F-Secure, Kaspersky, Symantec, SecurityFocus and Secunia apparently don't care about fake anti-virus authors, I'm giving you this awesome, yet simple flaw that will give you access to their main control panel. ======== !background ======== I originally found this while...

Sql injection

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1248

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...

CVE-2009-1247

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1248

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...

CVE-2009-1247

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...