4796 matches found
XSS, Redirector and FPD vulnerabilities in WordPress
Hello 3APA3A! In June I've disclosed vulnerabilities in WordPress, which I'd present for you. They take place in plugin Akismet for WordPress and it's core-plugin since version WP 2.0, so these vulnerabilities concern WordPress itself. This is the first in series of advisories concerning...
Tiki Wiki CMS Groupware 8.3 Code Execution
?php / ----------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.3 "unserialize" PHP Code Execution ----------------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............: n0b0d13satgmaildotcom software...
Tiki Wiki CMS Groupware 8.3 - Unserialize() PHP Code Execution
Tiki Wiki CMS Groupware 8.3 - Unserialize PHP Code Execution ?php / ----------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.3 "unserialize" PHP Code Execution ----------------------------------------------------------------- author...........: Egidio Romano a...
Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution
Exploit for php platform in category web applications ?php / ----------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.3 "unserialize" PHP Code Execution ----------------------------------------------------------------- author...........: Egidio Romano aka EgiX...
Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
?php / ----------------------------------------------------------------- Tiki Wiki CMS Groupware = 8.3 "unserialize" PHP Code Execution ----------------------------------------------------------------- author...........: Egidio Romano aka EgiX mail.............: n0b0d13satgmaildotcom software...
Design/Logic Flaw
Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header...
CVE-2012-3838
Gekko before 1.2.0 allows remote attackers to obtain the installation path via a direct request to 1 admin/templates/babygekko/index.php or 2 templates/html5demo/index.php...
vBulletin 3.x.x full path disclosure Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
WordPress yet-another-photoblog plugin Full path disclosure Vulnerability
Exploit for php platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...
WordPress Organizer 1.2.1 Cross Site Scripting / Directory Traversal
Hello list! After previous vulnerabilities in plugin Organizer, I'll present five more security vulnerabilities in plugin Organizer for WordPress. This is the fourth in series of advisories concerning vulnerabilities in this plugin. These are Directory Traversal, Cross-Site Scripting and Full pat...
vBulletin 4.1.12 Path Disclosure
TITLE ....... vBulletin 4.1.12 - information disclosure for logged in users DATE ........ 30.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://vbulletin.com VERSION ..... TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is thi...
Fedora 17 : drupal7-7.14-2.fc17 (2012-8398)
Fix for CVE-2012-2922, path disclosure vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
ecshop 依然存在爆路径漏洞
简要描述： 详细说明： ecshop 依然存在爆路径漏洞 （另求乌云邀请码 ） 漏洞证明： http://www.ecshop.cn/respond.php?code=cod&attach=voucher&spbillno=1%20and%201=2...
Concrete 5.5.21 XSS / CSRF / Path Disclosure
====================================================================================================================== Vulnerable software: Concrete CMS 5.5.21 Downloaded from: http://citylan.dl.sourceforge.net/project/concretecms/concrete5/5.5.2.1/concrete5.5.2.1.zip...
Drupal 7.14 <= Full Path Disclosure Vulnerability
Drupal 7.14 = Full Path Disclosure Vulnerability Discovered by: Jean Pascal Pereira [email protected] About Drupal: "Drupal is an open source content management platform powering millions of websites and applications. It's built, used, and supported by an active and diverse community of people...
Baby Gekko CMS v1.1.5c Multiple Stored XSS Vulnerabilities
Exploit for php platform in category web applications Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high quality websites and other web...
Baby Gekko CMS 1.1.5c - Multiple Persistent Cross-Site Scripting Vulnerabilities
Baby Gekko CMS 1.1.5c - Multiple Persistent Cross-Site Scripting Vulnerabilities Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high...
Baby Gekko CMS 1.1.5c - Multiple Persistent Cross-Site Scripting Vulnerabilities
Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high quality websites and other web content fast and easy for all end users. It is a...
Baby Gekko CMS 1.1.5c Cross Site Scripting
Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities Vendor: Baby Gekko, Inc. Product web page: http://www.babygekko.com Affected version: 1.1.5c Summary: BabyGekko strives to deliver high quality websites and other web content fast and easy for all end users. It is a...
Baby Gekko CMS v1.1.5c Multiple Stored Cross-Site Scripting Vulnerabilities
Summary BabyGekko strives to deliver high quality websites and other web content fast and easy for all end users. It is a lightweight, extensible content management system platform for publishing websites, intranets, or blogs. Description Baby Gekko CMS suffers from multiple stored post-auth XSS...