Blog System <= 1.5 Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting...

New vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Local File Inclusion, Directory Traversal и Full path disclosure уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. SQL Injection: http://site/?fun=-120or20version3E4 Local File Inclusion через SQL Injection:...

Uebimiau Webmail 2.7.2 Cross Site Scripting / Path Disclosure

Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are...

Uebimiau Webmail <= 2.7.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================== Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection...

Joomla! Component com_vxdate - Multiple Vulnerabilities

Joomla! Component comvxdate - Multiple Vulnerabilities ------------------------------------------------------------------------------------------------------------- I want to warn you about vulnerabilities in component VXDate for Joomla. ----------------------------- Advisory: Vulnerabilities in...

Joomla! Component com_vxdate - Multiple Vulnerabilities

------------------------------------------------------------------------------------------------------------- I want to warn you about vulnerabilities in component VXDate for Joomla. ----------------------------- Advisory: Vulnerabilities in VXDate for Joomla ----------------------------- URL:...

Joomla VXDate SQL Injection / Cross Site Scripting

Hello Bugtraq! I want to warn you about vulnerabilities in component VXDate for Joomla. ----------------------------- Advisory: Vulnerabilities in VXDate for Joomla ----------------------------- URL: http://websecurity.com.ua/3849/ ----------------------------- Timeline: 10.05.2009 - found the...

Vulnerabilities in VXDate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, SQL Injection и Cross-Site Scripting уязвимостях в компоненте VXDate comvxdate для Joomla. Full path disclosure: http://site/index.php?option=comvxdate&ct=’ http://site/index.php?option=comvxdate&ct=1&md=details&id=’...

Hydra CMS Cross Site Scripting / SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Hydra CMS Cross Site Scripting / SQL Injection Vulnerabilities ============================================================== Hello Full-Disclosure! I want to warn you about...

Hydra CMS SQL Injection / Cross Site Scripting

Hello Full-Disclosure! I want to warn you about vulnerabilities in Hydra Engine. It's commercial Ukrainian CMS. ----------------------------- Advisory: Vulnerabilities in Hydra Engine ----------------------------- URL: http://websecurity.com.ua/3453/ ----------------------------- Timeline:...

FileExecutive 1 - Multiple Vulnerabilities

============================================================================== » Thx To : Jiko ,H.Scorpion ,Dr.Bahy ,T3rr0rist ,Golden-z3r0 ,Shr7 Team . ============================================================================== » FileExecutive Multiple Vulnerabilities...

FileExecutive 1 - Multiple Vulnerabilities

FileExecutive 1 - Multiple Vulnerabilities ============================================================================== » Thx To : Jiko ,H.Scorpion ,Dr.Bahy ,T3rr0rist ,Golden-z3r0 ,Shr7 Team . ============================================================================== » FileExecutive Multip...

FileExecutive v1.0.0 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================= FileExecutive v1.0.0 Multiple Vulnerabilities ============================================= ============================================================================== » FileExecutive...

Social Web CMS <= Beta 2 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================= Social Web CMS Vuln:: Directory Listing http://server/modules/ Full Path Disclosure From Unlogged Browsing http://server/module.php?module=simplemessaging&view=delmsg&msgid= User Redirectio...

New-CMS 1.08 LFI / XSS / XSRF / Shell Upload

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

New-CMS v1.08 Multiple Vulnerability

Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...

Vulnerabilities in Hydra Engine

Здравствуйте 3APA3A! Сообщаю вам о Full path disclosure, SQL Injection и Cross-Site Scripting уязвимостях в системе Hydra Engine. Это украинская CMS. Full path disclosure: http://site/search/’/ SQL Injection: http://site/search/'20and20version3E5--20/ XSS:...

Multiple vulnerabilities in XAMPP

No description provided by source. I am continue informing you about multiple vulnerabilities in XAMPP. ----------------------------- Advisory 7 ----------------------------- CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP ----------------------------- URL:...