PHPplanner PHP Planner 0.4 - Multiple Vulnerabilities

PHPplanner PHP Planner 0.4 - Multiple Vulnerabilities Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date: 13/05/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://phpplanner.sourceforge.net/ Version: = v.0.4 Tested on: PHP Full Path...

UTStats XSS / SQL Injection / Full path disclosure

Exploit for php platform in category web applications ================================================== UTStats XSS / SQL Injection / Full path disclosure ================================================== Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author:...

UTStats - Cross-Site Scripting SQL Injection Full Path Disclosure

UTStats - Cross-Site Scripting SQL Injection Full Path Disclosure Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE...

phpplanner <= PHP Planner v.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================== phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities ======================================================== Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date:...

UTStats - Cross-Site Scripting / SQL Injection / Full Path Disclosure

Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE : none Code : There are most likely some more bugs in it. I didn'...

PHPplanner PHP Planner 0.4 - Multiple Vulnerabilities

Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date: 13/05/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://phpplanner.sourceforge.net/ Version: = v.0.4 Tested on: PHP Full Path Disclosure Full Path Disclosure FPD vulnerabilities...

Vulnerabilities in plugin Gigya Socialize for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в плагине Gigya Socialize для WordPress. XSS: http://site/?223E3Cscript3Ealert/XSS/3C/script3E XSS имеет место в логин виджете данного плагина. Full path disclosure:...

Gigya Socialize 1.1.8 For WordPress Cross Site Scripting

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin Gigya Socialize for WordPress. ----------------------------- Advisory: Vulnerabilities in Gigya Socialize for WordPress ----------------------------- URL: http://websecurity.com.ua/4153/ -----------------------------...

Joomla DS-Syndicate SQL Injection

Hello Full-Disclosure! I want to warn you about security vulnerabilities in plugin DS-Syndicate for Joomla. ----------------------------- Advisory: Vulnerabilities in DS-Syndicate for Joomla ----------------------------- URL: http://websecurity.com.ua/4003/ ----------------------------- Affected...

New vulnerabilities in plugin DS-Syndicate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о Full path disclosure, Cross-Site Scripting и Directory Traversal уязвимостях в плагине DS-Syndicate для Joomla. Full path disclosure: http://site/index2.php?option=ds-syndicate&version=1&feedid=10A1 Хотя данная FPD имеет место в том же самом скрипте и том же сам...

Vulnerabilities in plugin DS-Syndicate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о SQL Injection и Full path disclosure уязвимостях в плагине DS-Syndicate для Joomla. SQL Injection: http://site/index2.php?option=ds-syndicate&version=1&feedid=-120or20version=5 Full path disclosure: http://site/index2.php?option=ds-syndicate&version=1&feedid=...

phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path

Exploit for php platform in category web applications ======================================================= phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path ======================================================= Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path...

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting Full Path

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting Full Path Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path Disclosure. Date: 20/04/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: www.phpmyadmin.net |...

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting / Full Path

Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path Disclosure. Date: 20/04/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: www.phpmyadmin.net | http://www.phpmyadmin.net/homepage/downloads.php Version: 2.6.3-pl1 Tested on: PHP Cross...

TYPO3 t3m_cumulus_tagcloud 1.0 Cross Site Scripting

Hello Bugtraq! I want to warn you about security vulnerabilities in t3mcumulustagcloud plugin for TYPO3. ----------------------------- Advisory: Vulnerabilities in t3mcumulustagcloud for TYPO3 ----------------------------- URL: http://websecurity.com.ua/4181/ ----------------------------- Affecte...

Vulnerabilities in t3m_cumulus_tagcloud for TYPO3

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting и Full path disclosure уязвимостях в плагине t3mcumulustagcloud для TYPO3. Данная XSS уязвимость идентична XSS уязвимости в Tagcloud для DLE http://websecurity.com.ua/3927/. Про миллионы флешек tagcloud.swf уязвимых к XSS атакам я упоминал в...

osCommerce v3.0a5 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================== osCommerce v3.0a5 Multiple Vulnerabilities ========================================== Vendor SW: osCommerce Version: 3.0a5 but possible all versions Vendor URL: www.oscommerce.com Tested on: Ubuntu...

New-CMS - Multiple Vulnerabilities

New-CMS - Multiple Vulnerabilities Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com...

New-CMS v1.08 Multiple Vulnerability

Exploit for php platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category:...

osCommerce 3.0a5 Cross Site Request Forgery / Cross Site Scripting / Local File Inclusion

Multiple Vulnerabilities in osCommerce Vendor SW: osCommerce Version: 3.0a5 but possible all versions Vendor URL: www.oscommerce.com Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 30 Apr 2010 Author: Alberto Fontanella Author WEB: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it...