PhoenixCMS 1.7.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

PhoenixCMS 1.7.0 Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

HTB22922: XSS vulnerabilities in phpAlbum.net

Vulnerability ID: HTB22922 Reference: http://www.htbridge.ch/advisory/xssvulnerabilitiesinphpalbumnet.html Product: phpAlbum.net Vendor: Patrik Jakab http://www.phpalbum.net/ Vulnerable Version: 0.4.1-14fix06 Vendor Notification: 31 March 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

HTB22927: CSRF (Cross-Site Request Forgery) in Webjaxe

Vulnerability ID: HTB22927 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinwebjaxe.html Product: Webjaxe Vendor: Webjaxe http://media4.obspm.fr/outils/webjaxe/en/ Vulnerable Version: 1.02 Vendor Notification: 29 March 2011 Vulnerability Type: CSRF Cross-Site Request Forger...

HTB22929: Multiple Path disclosure in WebsiteBaker

Vulnerability ID: HTB22929 Reference: http://www.htbridge.ch/advisory/multiplepathdisclosureinwebsitebaker.html Product: WebsiteBaker Vendor: Website Baker Org http://www.websitebaker2.org/ Vulnerable Version: 2.8.1 Vendor Notification: 29 March 2011 Vulnerability Type: Path disclosure Risk level...

HTB22926: XSS vulnerability in Plogger

Vulnerability ID: HTB22926 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinplogger.html Product: Plogger Vendor: Plogger Team http://www.plogger.org/ Vulnerable Version: 1.0 RC1 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Risk level: Medium Credit: High-Tech Bridge SA ...

Webjaxe 1.02 Cross Site Request Forgery

Vulnerability ID: HTB22927 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinwebjaxe.html Product: Webjaxe Vendor: Webjaxe http://media4.obspm.fr/outils/webjaxe/en/ Vulnerable Version: 1.02 Vendor Notification: 29 March 2011 Vulnerability Type: CSRF Cross-Site Request Forger...

WebsiteBaker 2.8.1 Path Disclosure / SQL Injection

=================================== Vulnerability ID: HTB22929 Reference: http://www.htbridge.ch/advisory/multiplepathdisclosureinwebsitebaker.html Product: WebsiteBaker Vendor: Website Baker Org http://www.websitebaker2.org/ Vulnerable Version: 2.8.1 Vendor Notification: 29 March 2011...

HTB22918: Path disclosure in phpCollab

Vulnerability ID: HTB22918 Reference: http://www.htbridge.ch/advisory/pathdisclosureinphpcollab.html Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: Path disclosure Risk...

HTB22916: XSRF (CSRF) in phpCollab

Vulnerability ID: HTB22916 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpcollab.html Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: CSRF Cross-Site Request...

phpCollab 2.5 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tech...

eksi7 Web Design Vulnerable to Multiple SQL Injection

Exploit for php platform in category web applications Title : eksi7 Web Design Vulnerable to Multiple SQL Injection Vendor: http://www.eksi7.com Found by : p0pc0rn Dork : inurl:"devam.asp?haberid=" inurl:"katlist.asp?katid=" intext:"tasarim ve programlama eksi7 web hizmetleri" intext:"design and...

eGroupware 1.8.001 SQL Injection

------------------------------------------------------------------------ Software................eGroupware 1.8.001 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.egroupware.org/ Discovery Date..........4/7/2011 Tested...

Synergy 1.4 Protocol Cleartext Weakness Proof Of Concept

Exploit Title: Synergy Protocol cleartext weakness PoC Date:April 5th 2011 Author: Sw1tCh Software Link: http://synergy-foss.org/ Version: 1.4 -= Info =- Synergy is Free and Open Source Software that lets you easily share your mouse and keyboard between multiple computers, where each computer has...

WordPress WP Custom Pages Plugin 0.5.0.1 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

eyeos 2.3 - Multiple Vulnerabilities

eyeos 2.3 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................eyeOS 2.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.eyeos.org/ Discovery...

Anfibia Reactor 2.1.1 (login.do) Remote XSS POST Injection Vulnerability

Summary Fast web-based server monitoring. Keep an eye on servers, connections, databases, cpu, hard drives and more! Description The Anfibia Reactor JS service suffers from a XSS vulnerability when parsing user input to the 'email' parameter via POST method in 'reactor/login.do' script at the...

eyeOS 2.3 Local File Inclusion

------------------------------------------------------------------------ Software................eyeOS 2.3 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.eyeos.org/ Discovery Date..........4/3/2011 Tested On...............Windo...

Eleanor CMS rc5 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22912 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectionsineleanorcms.html Product: Eleanor CMS Vendor: Eleanor CMS http://eleanor-cms.ru/ Vulnerable Version: rc5 Vendor Notification: 22 March 2011 Vulnerability Type: SQL Injecti...

WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion

WordPress Plugin Custom Pages 0.5.0.1 - Local File Inclusion ------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...