Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting

Exploit Title: Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting Date: 2020-09-19 Exploit Author: Alperen Ergel Vendor Homepage: https://www.flatpress.org/ Software Link: https://github.com/evacchi/flatpress/releases/tag/v1.0.3 Version: 1.0.3 Tested on: windows 10 / xampp CVE :...

Flatpress 1.0.3 - Cross-Site Request Forgery Arbitrary File Upload

Flatpress 1.0.3 - Cross-Site Request Forgery Arbitrary File Upload FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec...

Flatpress 1.0.3 - Cross-Site Request Forgery / Arbitrary File Upload

Exploit for php platform in category web applications FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpre...

Flatpress 1.0.3 - Cross-Site Request Forgery / Arbitrary File Upload

FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec = command.value;...

FlatPress 1.0.3 Cross Site Request Forgery / Shell Upload

FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec = command.v...

FlatPress 1.0.3 CSRF Arbitrary File Upload

Summary FlatPress is a blogging engine that saves your posts as simple text files. Forget about SQL! You just need some PHP. Description The vulnerability is caused due to the improper verification of uploaded files via the Uploader script using 'upload' POST parameter which allows of arbitrary...

FlatPress 1.0 Cross Site Scripting

Affected software: FlatPress 1.0 Type of vulnerability:stored xss URL:http://www.opensourcecms.com/scripts/details.php?scriptid=77&name=FlatPress Discovered by: provensec Website: provensec.com version: FlatPress 1.0 Proof of concept adding a new entry with xss payload will lead to stored cross...

CVE-2014-100036

Cross-site scripting XSS vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI...

Cross site scripting

Cross-site scripting XSS vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI...

CVE-2014-100036

CVE-2014-100036 is an XSS vulnerability affecting FlatPress 1.0.2, where an attacker can inject arbitrary web script or HTML via the content parameter to the default URI. The root cause is a failure to properly sanitize user-supplied content in the default URI handling, enabling reflected or stor...

CVE-2014-100036

Cross-site scripting XSS vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI...

FlatPress 0.804 Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/31407/info FlatPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the brows...

flatpress 0.909.1 - Stored XSS vulnerability

No description provided by source. Title: FlatPress 0.909.1 Stored XSS Vendor: http://www.flatpress.org Dork: powered by FlatPress AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

FlatPress 0.804 - 0.812.1 - Local File Inclusion vulnerability

No description provided by source. Security Advisory ----------------- FlatPress 0.804-0.812.1 Local File Inclusion to Remote Command Execution Researcher Information ---------------------- Discovered by: Giuseppe Zmax Fuggiano Website: http://www.giusef.net Contact:...

Flatpress 1.0 - Remote Code Execution

No description provided by source. !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution

Flatpress 1.0 - Remote Code Execution !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution

!/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications !/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

Flatpress 1.0 Traversal / Command Execution

!/usr/bin/perl Exploit Title: Flatpress remore code execution PoC NULLday Google Dork: This site is powered by FlatPress. Date: 17/10/2013 Exploit Author: Wireghoul Vendor Homepage: http://flatpress.org/home/ Software Link:...

FlatPress < 0.1010.2 XSS Vulnerability

FlatPress is prone to a cross-site scripting XSS vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...