Vulnerabilities in Cimy Counter for WordPress

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/ ----------------------------- Affected...

Vulnerabilities in Cimy Counter for WordPress

No description provided by source. I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/...

Cimy Counter For Wordpress Full Path Disclosure / Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/ -----------------------------...

Vulnerabilities in Cimy Counter for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Redirector, Cross-Site Scripting и HTTP Response Spitting уязвимостях в плагине Cimy Counter для WordPress. Full path disclosure: http://site/wp-content/plugins/cimy-counter/cimycounter.php...

PHP Event Calendar 1.5 Cross Site Request Forgery / Cross Site Scripting / Traversal

Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site Scripting Cross-Site Scripting attacks are a type ...

PHP Event Calendar 1.5 - Multiple Vulnerabilities

Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site Scripting Cross-Site Scripting attacks are a type ...

PHP Event Calendar <= v1.5 Multiple Vulnerabilities

Exploit for php platform in category web applications =================================================== PHP Event Calendar = v1.5 Multiple Vulnerabilities =================================================== Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r |...

PHP Event Calendar 1.5 - Multiple Vulnerabilities

PHP Event Calendar 1.5 - Multiple Vulnerabilities Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site...

Firebook XSS / XSRF / Directory Traversal / Full Path Disclosure

Hello Bugtraq! I want to warn you about security vulnerabilities in Firebook. ----------------------------- Advisory: Vulnerabilities in Firebook ----------------------------- URL: http://websecurity.com.ua/4124/ ----------------------------- Affected products: all versions of Firebook...

Vulnerabilities in Firebook

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage, Cross-Site Request Forgery, Cross-Site Scripting, Directory Traversal и Full path disclosure уязвимостях в Firebook. Information Leakage: http://site/pathtofirebookadmin/?URLproxy=http://firebook.ru/env/index.html; CSRF:...

PHP Planner 0.4 Cross Site Request Forgery

Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date: 13/05/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://phpplanner.sourceforge.net/ Version: = v.0.4 Tested on: PHP Full Path Disclosure Full Path Disclosure FPD vulnerabilities...

PHPplanner PHP Planner 0.4 - Multiple Vulnerabilities

PHPplanner PHP Planner 0.4 - Multiple Vulnerabilities Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date: 13/05/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://phpplanner.sourceforge.net/ Version: = v.0.4 Tested on: PHP Full Path...

UTStats XSS / SQL Injection / Full path disclosure

Exploit for php platform in category web applications ================================================== UTStats XSS / SQL Injection / Full path disclosure ================================================== Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author:...

UTStats - Cross-Site Scripting SQL Injection Full Path Disclosure

UTStats - Cross-Site Scripting SQL Injection Full Path Disclosure Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE...

PHPplanner PHP Planner 0.4 - Multiple Vulnerabilities

Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date: 13/05/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://phpplanner.sourceforge.net/ Version: = v.0.4 Tested on: PHP Full Path Disclosure Full Path Disclosure FPD vulnerabilities...

UTStats - Cross-Site Scripting / SQL Injection / Full Path Disclosure

Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE : none Code : There are most likely some more bugs in it. I didn'...

phpplanner <= PHP Planner v.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================== phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities ======================================================== Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date:...

Vulnerabilities in plugin Gigya Socialize for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в плагине Gigya Socialize для WordPress. XSS: http://site/?223E3Cscript3Ealert/XSS/3C/script3E XSS имеет место в логин виджете данного плагина. Full path disclosure:...

Gigya Socialize 1.1.8 For WordPress Cross Site Scripting

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin Gigya Socialize for WordPress. ----------------------------- Advisory: Vulnerabilities in Gigya Socialize for WordPress ----------------------------- URL: http://websecurity.com.ua/4153/ -----------------------------...

Vulnerabilities in plugin DS-Syndicate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о SQL Injection и Full path disclosure уязвимостях в плагине DS-Syndicate для Joomla. SQL Injection: http://site/index2.php?option=ds-syndicate&version=1&feedid=-120or20version=5 Full path disclosure: http://site/index2.php?option=ds-syndicate&version=1&feedid=...