Freelancer 1.0.0 Cross Site Request Forgery

Product: FREELANCER Vendor: http://www.got.my http://www.got.my/FREELANCER/ Vulnerable Version: 1.0.0 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: Hector.x90 Vulnerability Details: The vulnerability exists due to failure in the "index.php" script to properly verify...

Classmates 1.1.1 Cross Site Scripting

Product: CLASSMATES Vendor: http://www.got.my http://www.got.my/CLASSMATES/ Vulnerable Version: 1.1.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

YaPiG 0.95 Cross Site Scripting

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

SelectaPix Image Gallery 1.4.1 Cross Site Request Forgery

Vulnerability ID: HTB22963 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinselectapiximagegallery.html Product: SelectaPix Image Gallery Vendor: http://www.outofthetrees.co.uk/ http://www.outofthetrees.co.uk/ Vulnerable Version: 1.4.1 Vendor Notification: 19 April 2011...

Classifieds Ads 2.9.1 Cross Site Scripting

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

HTB22964: XSS in SelectaPix Image Gallery

Vulnerability ID: HTB22964 Reference: http://www.htbridge.ch/advisory/xssinselectapiximagegallery.html Product: SelectaPix Image Gallery Vendor: http://www.outofthetrees.co.uk/ http://www.outofthetrees.co.uk/ Vulnerable Version: 1.4.1 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cro...

Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC

Exploit for php platform in category web applications Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / \ // \ / \ |\ //| |\ //|...

Time And Expense Management System Cross Site Scripting

------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://sourceforge.net/projects/tems/ Discovery...

XSS in DEAL INFORMER

Product: DEAL INFORMER Vendor: http://www.got.my http://www.got.my/DEAL-INFORMER/ Vulnerable Version: 4.8.0 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

LDAP Account Manager 3.4.0 Cross Site Scripting

------------------------------------------------------------------------ Software................LDAP Account Manager 3.4.0 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.ldap-account-manager.org/ Discovery...

HTB22960: XSS in Daily Maui Photo Widget wordpress plugin

Vulnerability ID: HTB22960 Reference: http://www.htbridge.ch/advisory/xssindailymauiphotowidgetwordpressplugin.html Product: Daily Maui Photo Widget wordpress plugin Vendor: Kris Nelson http://www.webnelly.com/ Vulnerable Version: 0.2 Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cro...

HTB22958: XSS in phpGraphy

Vulnerability ID: HTB22958 Reference: http://www.htbridge.ch/advisory/xssinphpgraphy.html Product: phpGraphy Vendor: http://phpgraphy.sourceforge.net/ http://phpgraphy.sourceforge.net/ Vulnerable Version: 0.9.13b Vendor Notification: 14 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

Exponent CMS 2.0 Beta 1.1 - Cross-Site Request Forgery (Add Administrator Account)

Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / \ // \ / \ |\ //| |\ //| \ || / \ || / \ / \ / \ / \ / .-""""-. '..'.-""""-...

HTB22959: CSRF (Cross-Site Request Forgery) in phpGraphy

Vulnerability ID: HTB22959 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinphpgraphy.html Product: phpGraphy Vendor: http://phpgraphy.sourceforge.net/ http://phpgraphy.sourceforge.net/ Vulnerable Version: 0.9.13b Vendor Notification: 14 April 2011 Vulnerability Type: CSRF...

Exponent CMS 2.0 Beta 1.1 - Cross-Site Request Forgery (Add Administrator Account)

Exponent CMS 2.0 Beta 1.1 - Cross-Site Request Forgery Add Administrator Account Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC by outlaw.dll body, table, tr, td background-color: 00489C; font-family: Verdana; font-size: 16px; color: FFFFFF; .-""""-. .-""""-. / \ / \ / \ / \ // \ / ...

InterPhoto Gallery 2.5.0 File Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

phpGraphy 0.9.13b Multiple Vulnerabilities

Exploit for php platform in category web applications Product: phpGraphy Vendor: http://phpgraphy.sourceforge.net/ http://phpgraphy.sourceforge.net/ Vulnerable Version: 0.9.13b Vendor Notification: 14 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tech...

phpGraphy 0.9.13b Cross Site Request Forgery / Cross Site Scripting

===================================== Vulnerability ID: HTB22959 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinphpgraphy.html Product: phpGraphy Vendor: http://phpgraphy.sourceforge.net/ http://phpgraphy.sourceforge.net/ Vulnerable Version: 0.9.13b Vendor Notification: 1...

phpGraphy 0.9.13b - Multiple Vulnerabilities

phpGraphy 0.9.13b - Multiple Vulnerabilities ===================================== Vulnerability ID: HTB22959 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinphpgraphy.html Product: phpGraphy Vendor: http://phpgraphy.sourceforge.net/ http://phpgraphy.sourceforge.net/...

Microsoft Office Excel Buffer Overflow

This is a PoC for MS11-021/CVE-2011-0978 Microsoft Office Excel Axis Properties Record Parsing Buffer Overflow w3bd3vilatgmaildot.com twitter.com/w3bd3vil Modify bits at file location 0x39E7 0:000:x86 r eax=04dd6380 ebx=ffff5554 ecx=04ab5108 edx=00000000 esi=04ab4800 edi=ffff5554 eip=2f36a2fd...