New-CMS - Multiple Vulnerabilities

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

Argosoft FTP Server .NET 1.0.2.1 Path Traversal

Exploit Title: Argosoft FTP SERVER .NET Version pwd 257 "/" is working directory //i'm standing on the ftp root directory ftp dir 200 Port command successful 150 Opening ASCII data connection drw-r--r-- 1 user group 0 Apr 26 18:29 tesstdir -rw-r--r-- 1 user group 0 Apr 26 18:29 testfile.txt 226...

LaNewsFactory 1.0.0 Anonymous Email / Command Execution

LaNewsFactory Multiple Remote Vulnerabilities http://www.salvatorefresta.net/files/adv/LaNewsFactory%20Multiple%20Remote%20Vulnerabilities-19042010.txt Name LaNewsFactory Vendor Christophe Brocas Versions Affected = 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.n...

lanewsfactory - Multiple Vulnerabilities

lanewsfactory - Multiple Vulnerabilities LaNewsFactory Multiple Remote Vulnerabilities http://www.salvatorefresta.net/files/adv/LaNewsFactory%20Multiple%20Remote%20Vulnerabilities-19042010.txt Name LaNewsFactory Vendor Christophe Brocas Versions Affected = 1.0.0 Author Salvatore Fresta aka...

LaNewsFactory Multiple Remote Vulnerabilities

Exploit for php platform in category web applications ============================================= LaNewsFactory Multiple Remote Vulnerabilities ============================================= LaNewsFactory Multiple Remote Vulnerabilities...

MyBB 1.4.12 <= Full Path Disclosure

Exploit for php platform in category web applications =================================== MyBB 1.4.12 = Full Path Disclosure =================================== Exploit Title: MyBB 1.4.12 = Full Path Disclosure Software MyBB 1.4.X Date: 2010-04-19 Author: GLOBUS Software Link: http://mybboard.net...

Blog System <= 1.5 Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting...

PHP-Fusion v7.00.07 Core PL Full Path Disclosure

Exploit for php platform in category web applications ================================================ PHP-Fusion v7.00.07 Core PL Full Path Disclosure ================================================ Exploit Title: PHP-Fusion v7.00.07 Core PL Full Path Disclosure Software PHP-Fusion v7.00.07 Cor...

Blog System 1.5 - Multiple Vulnerabilities

Blog System 1.5 - Multiple Vulnerabilities Exploit Title: Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of...

Blog System 1.5 Cross Site Scripting / Local File Inclusion / SQL Injection

Exploit Title: Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts...

Blog System 1.5 - Multiple Vulnerabilities

Exploit Title: Blog System | www.DigitalWhisper.co.il Software Link: http://www.netartmedia.net/blogsystem/ | http://www.netartmedia.net/blogsystem/demo.html Version: = 1.5 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts...

New vulnerabilities in CMS SiteLogic

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Local File Inclusion, Directory Traversal и Full path disclosure уязвимостях в CMS SiteLogic. Это украинская коммерческая CMS. SQL Injection: http://site/?fun=-120or20version3E4 Local File Inclusion через SQL Injection:...

Uebimiau Webmail 2.7.2 Cross Site Scripting / Path Disclosure

Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web...

Uebimiau Webmail <= 2.7.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================== Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are...

Uebimiau Webmail 2.7.2 - Multiple Vulnerabilities

Exploit Title: Uebimiau Webmail | www.DigitalWhisper.co.il Software Link: http://www.uebimiau.org/ Version: = 2.7.2 Tested on: PHP Cross Site Scripting Cross-Site Scripting attacks are a type of injection problem, in which malicious scripts are injected into the otherwise benign and trusted web...

Joomla! Component com_vxdate - Multiple Vulnerabilities

Joomla! Component comvxdate - Multiple Vulnerabilities ------------------------------------------------------------------------------------------------------------- I want to warn you about vulnerabilities in component VXDate for Joomla. ----------------------------- Advisory: Vulnerabilities in...

Joomla VXDate SQL Injection / Cross Site Scripting

Hello Bugtraq! I want to warn you about vulnerabilities in component VXDate for Joomla. ----------------------------- Advisory: Vulnerabilities in VXDate for Joomla ----------------------------- URL: http://websecurity.com.ua/3849/ ----------------------------- Timeline: 10.05.2009 - found the...

Joomla! Component com_vxdate - Multiple Vulnerabilities

------------------------------------------------------------------------------------------------------------- I want to warn you about vulnerabilities in component VXDate for Joomla. ----------------------------- Advisory: Vulnerabilities in VXDate for Joomla ----------------------------- URL:...

Vulnerabilities in VXDate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, SQL Injection и Cross-Site Scripting уязвимостях в компоненте VXDate comvxdate для Joomla. Full path disclosure: http://site/index.php?option=comvxdate&ct=’ http://site/index.php?option=comvxdate&ct=1&md=details&id=’...