Advanced Electron Forum 1.0.9 - Cross-Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-CSRF.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ==================================== Advanced Electron Forum v1.0.9 AEF Exploit patched current...

Advanced Electron Forum 1.0.9 - Remote File Inclusion / Cross-Site Request Forgery

Exploit for php platform in category web applications...

Advanced Electron Forum 1.0.9 Cross Site Request Forgery / Remote File Inclusion

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-RFI.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ================================ Advanced Electron Forum v1.0.9 AEF Exploit patched current version...

Advanced Electron Forum 1.0.9 - Remote File Inclusion / Cross-Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-RFI.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ================================ Advanced Electron Forum v1.0.9 AEF Exploit patched current version...

XenForo Forum Detection

This script detects an installed XenForo Forum. SPDX-FileCopyrightText: 2016 SCHUTZWERK GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

YouYaX V5.47 论坛前台任意账户登入（cookie伪造）漏洞

No description provided by source...

YouYaX论坛前台任意账户登入（cookie伪造）漏洞

No description provided by source...

Mail.ru: [parapa.mail.ru] SQL Injection

Добрый день. Тип уязвимости - Time Based SQL Injection, Уязвимые параметры - куки parapauid и parapasid. Уязвимость воспроизводиться на многих страницах сайта, в том числе и на форуме. PoC GET /forums/ HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64 AppleWebKit/537.36 KHTML, like Gecko...

MiniBB 'index.php' Cross-Site Scripting Vulnerability

MiniBB is a free, open source Internet forum software. MiniBB suffers from a cross-site scripting vulnerability that can be exploited by a remote attacker to construct malicious URIs, trick users into parsing them, obtain sensitive cookies, hijack sessions or perform malicious operations on the...

Mail.ru: XSS at forum :

Vulnerable URL: https://touch.deti.mail.ru/forum/ Step to repro: 1. https://touch.deti.mail.ru/forum/ go here Create new TOPIC . in subject use this vector : '" and create topic. now go to your topic. xss will trigged. Thanks...

forum-pc.net Open Redirect vulnerability

Vulnerable URL: http://www.forum-pc.net/go.php?url=http://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 15974547 Google Pagerank| 2 VIP website status:...

technopat.net vulnerability

Vulnerable URL: http://www.technopat.net/forum/vbseocp.phpcustom301" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 9866 Google Pagerank| 3 VIP website status:| Yes Check technopat.net SSL connection:|...

infoforthai.com vulnerability

Vulnerable URL: http://www.infoforthai.com/forum/go.php?http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 2511864 Google Pagerank| 1 VIP website status:| No Check infoforthai.com SSL...

ruslog.com vulnerability

Vulnerable URL: http://ruslog.com/forum/noreg.php?http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 753780 Google Pagerank| 1 VIP website status:| No Check ruslog.com SSL connection:| Grad...

4vn.eu vulnerability

Vulnerable URL: http://4vn.eu/forum/vcheckvirus.php?url=http://xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 451570 Google Pagerank| 1 VIP website status:| No Check 4vn.eu SSL connection:|...

Lithium Forum Cross Site Scripting

Document Title: =============== Lithium Forum - previewImages Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1520 Release Date: ============= 2015-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 152...

traitimyenbai.net vulnerability

Vulnerable URL: http://traitimyenbai.net/forum/download.php?referal=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.01.2016 Latest check for patch:| 26.01.2016 03:42 GMT Vulnerability status:| Publicly disclosed Alexa Rank| 1395136 Google Pagerank| 2 VIP website...

WordPress Symposium 14.05.02 Cross Site Request Forgery

Plugin Name : WP Symposium A8-Cross-SiteRequestForgeryCSRF Effected Version : 14.05.02 and most probably lower version's if any Vulnerability : A8-Cross-Site Request Forgery CSRF Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Unauthenticated PoC - Proof of Concep...

ellatha.com XSS vulnerability

Vulnerable URL: http://www.ellatha.com/forum/forum.asp?forum=7="';--=Open+Topic Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 259775 Google Pagerank| 4 V...

SimpleBB 4.2 Shell Upload

SimpleBB 4.2 + All ver upload Vulnerability ========================================== Author : indoushka Vondor : http://themeforest.net/item/simple-bulletin-board/58838?ref=themac Dork : SBB V4.2 ========================= 1 register in forum 2 Creat a new topic 3 Attachment a php file to downol...