FPD и XSS уязвимости в Easy Contact для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure и Cross-Site Scripting уязвимостях в плагине Easy Contact для WordPress. Full path disclosure WASC-13: http://site/wp-content/plugins/easy-contact/econtact.php http://site/wp-content/plugins/easy-contact/econtact-menu.php XSS...

Уязвимости в Easy Contact для WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Abuse of Functionality и Cross-Site Scripting уязвимостях в плагине Easy Contact для WordPress. Insufficient Anti-automation WASC-21: Отсутствие капчи на странице контактов позволяет слать автоматизированные сообщения...

Easy Contact 0.1.2 WordPress Plugin Cross Site Scripting

Hello list! I want to warn you about Insufficient Anti-automation, Abuse of Functionality and Cross-Site Scripting vulnerabilities in plugin Easy Contact for WordPress. ------------------------- Affected products: ------------------------- Vulnerable are Easy Contact 0.1.2 and previous versions...

Opera < 11.11 Multiple Vulnerabilities

Binary data 5925.prm...

Password Security Do's and Don'ts

We write a lot about sophisticated, targeted attacks and zero day vulnerabilities aside. But the fact is that most security breaches hinge on easy to prevent security holes – such as insecure passwords. Indeed, even as headlines blare about data breaches and hacks at prominent firms, password...

[SECURITY] Fedora 14 Update: kphotoalbum-4.1.1-8.fc14

A photo album tool. Focuses on three key points: It must be easy to describe a number of images at a time. It must be easy to search for images. It must be easy to browse and View the images...

BodgeIt Store : Vulnerable Web Application For Penetration Testing !

BodgeIt Store : Vulnerable Web Application For Penetration Testing ! Features Easy to install – just requires java and a servlet engine, e.g. Tomcat Self contained no additional dependencies other than to 2 in the above line Easy to change on the fly – all the functionality is implemented in JSPs...

Easy day technology Mall 2.1 Free Edition IIS6 parsing exploits-vulnerability warning-the black bar safety net

Easy day micro Mall is E-day technologies the only official service website. Provide professional e-Commerce service,including a free online store system,supply information publishing system design and development and provide Taobao brush drill Service,Shop Agent extension services. The exploit:...

The BodgeIt Store - another vulnerable web app

Hi folks, I've recently open sourced a vulnerable web app, called The BodgeIt Store: http://code.google.com/p/bodgeit/ Why? Well, you can never have too many vulnerable apps to test against, but also because I've found that many of the existing apps are non trivial to install - they either have a...

CVE-2010-4784

Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2010-4783

The CVE-2010-4783 entry concerns multiple cross-site scripting (XSS) vulnerabilities in index.php of PHP Web Scripts Easy Banner Free 2009.05.18. The root cause described in sources is that with magic_quotes_gpc disabled, an attacker can inject arbitrary web script or HTML via the siteurl and url...

CVE-2010-4784

CVE-2010-4784 describes multiple SQL injection vulnerabilities in the member.php component of PHP Web Scripts Easy Banner Free 2009.05.18. When magic_quotes_gpc is disabled, remote attackers may inject SQL via the (1) username and (2) password parameters. Details on exploitation, affected version...

CVE-2010-4783: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 siteurl and 2 urlbanner parameters...

CVE-2010-4784: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

ilchClan 1.0.5 (regist.php) SQL Injection Vulnerabiility

Exploit for php platform in category web applications SQL Injection Vulnerability in ilch clan 1.0.5 a,b,c,d,e,f! Vulnerability Name : Registration Bypass SQL Injection Vulnerability Date : 02.04.2011 SQL Injection method : $POST Discovered by : Easy Laster Security Group...

spidaNews 1.0 news.php (id) SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download :...

Anzeigenmarkt 2011 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ----------------------------Information------------------------------------------------ +Name : Anzeigenmarkt 2011 SQL Injection Vulnerability +Autor : Easy Laster +Date : 02.04.2011 +Script : ANZEIGENMARKT 2011 +Price : free +Language : PHP...

spidaNews 1.0 SQL Injection

----------------------------Information------------------------------------------------ +Name : spidaNews V.1.0 SQL injection Vulnerability news.php id +Autor : Easy Laster +Date : 02.04.2011 +Script : spidaNews V.1.0 +Download : http://www.spidanet.de/webmaster/download/spidaNews.zip +Price : fr...

Anzeigenmarkt 2011 - index.php SQL Injection

Anzeigenmarkt 2011 - index.php SQL Injection ----------------------------Information------------------------------------------------ +Name : Anzeigenmarkt 2011 SQL Injection Vulnerability +Autor : Easy Laster +Date : 02.04.2011 +Script : ANZEIGENMARKT 2011 +Price : free +Language : PHP +Discovere...

ilchClan 1.0.5 SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / \ \ \ \ | | | / / / // |/ | ' \ \ \ // / | | | | | | / / / |||| || \ \ Security Flaw in ilch clan 1.0.5 a,b,c,d,e,f! in regist.php /...