CVE-2012-6037: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTML via a CSV header with "unknown fields," which are not properly handled in error messages in the 1...

团购王SQL注入漏洞，会员信息泄露

简要描述： 参数过滤不严，导致sql注入 详细说明： http://www.go.cn/index.php?m=festival&type=451'&cityid=29 漏洞证明：...

Concrete5 Member List Enumeration

This module extracts username information from the Concrete5 member page This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Concrete5 Member List Enumeration', 'Description' = %q This module...

SIGMA COMPUTERS SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

91736cms cookie injection vulnerability-vulnerability warning-the black bar safety net

Re-read under 9 1 7 3 6 before that getip vulnerability has been patch on. 漏洞 文件 :system/modules/member/index.php public function edit ifempty$COOKIE'memberuser'||empty$COOKIE'memberuserid' showmsgC"adminnotexist","index. php? m=member&f=login"; $userid=$COOKIE'memberuserid';...

PT-2012-2207

Name of the Vulnerable Software and Affected Versions Seotoaster versions 1.9 and earlier Description The issue concerns SQL injection vulnerabilities in the selectUserIdByLoginPass function. Remote attackers can execute arbitrary SQL commands via the login parameter to "sys/login/index" or the...

Crash with invalid cast when using instanceof operator — Mozilla

Mozilla community member Ms2ger reported a crash due to an invalid cast when using the instanceof operator on certain types of JavaScript objects. This can lead to a potentially exploitable crash...

CVE-2012-1416

Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...

Design/Logic Flaw

popup.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modified newsid parameter in a printnews action...

CVE-2010-5065

popup.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modified newsid parameter in a printnews action...

PT-2012-1318

Name of the Vulnerable Software and Affected Versions Virtual War aka VWar version 1.6.1 R2 Description The issue allows remote attackers to bypass intended member restrictions and read news posts. This is achieved by modifying the newsid parameter in a "printnews" action. Recommendations For...

CVE-2010-5065: Undefined Security Weakness

popup.php in Virtual War aka VWar 1.6.1 R2 allows remote attackers to bypass intended member restrictions and read news posts via a modified newsid parameter in a printnews action...

CMS Balitbang Depdiknas 3.4 HTML Injection

============================================ CMS Balitbang Depdiknas v3.4 HTML Injection ============================================ :----------------------------------------------------------------------------------------------------: : Exploit Title : CMS Balitbang Depdiknas v3.4 HTML Injectio...

DedeCMS 5.7 member/ajax_membergroup.php SQL注入漏洞

No description provided by source...

ECMall 2. x two pieces of injection-vulnerability warning-the black bar safety net

Fuck one : \app\mygoods.app.php 2 2 9 0 row Fuck one EXP registered members-log-in-submit the following to http://site/index.php?app=mygoods&act=brandedit&id=1 andselect 1 fromselect count,concatselect select select concat0x7e27, ecmmember. username,0x27,0x7e, ecmmember. password,0x7e,0x27 from...

Plogger CMS 1.0 RC1 Cross Site Scripting

Exploit Title: Plogger cms sortdir Cross Site Scripting Vulnerability Version : 1.0 RC1 Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home or download link: http://www.plogger.org/download/ Tested on: all ================================== Plogger is the next generation in...

Bridgelin CMS Cross Site Scripting

Exploit Title: Bridgelin Cms Cross Site Scripting Vulnerability Google Dork: Intext:"Powered BY Bridgelin" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.bridgelin.com/ Tested on: all ================================== Post data ------------------------...

Accel Site CMS Cross Site Scripting

Exploit Title: AccelSite CMS Cross Site Scripting Vulnerability Google Dork: Intext:"Powered by AccelSite CMS" Date: 08/30/2012 Author: Crim3R Site : Http://Ajaxtm.com/ download Link Or Vendor Home: http://netacceleration.com/ascms Tested on: all ================================== assearch parame...

Corpussoft CMS Cross Site Scripting

Exploit Title: corpussoft Cms Cross Site Scripting Vulnerability Google Dork: Intext:"Designed & Powered by Corpussoft" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.corpussoft.com/ Tested on: all ================================== + input parametr in search.p...