Aprox CMS Engine 6.0 - Multiple Vulnerabilities

Aprox CMS Engine 6.0 - Multiple Vulnerabilities Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities Date: 03.10.2010 Author: Stephan Sattler // http://www.solidmedia.de Software Website: http://www.aprox.de/ Software Link:...

Многочисленные уязвимости в WordPress 2 и 3

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Information Leakage, Directory Traversal, Arbitrary File Deletion и Denial of Service уязвимостях в WordPress. Для всех этих атак нужно иметь доступ к админскому аккаунту, или иметь аккаунт с правами для...

Уязвимости в CMS MYsite

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Insufficeint Anti-automation уязвимостях в CMS MYsite это украинская коммерческая CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

CMS Mysite Cross Site Scripting / SQL Injection

Hello Full-Disclosure! I want to warn you about Full path disclosure, Cross-Site Scripting and SQL Injection vulnerabilities in CMS MYsite. It's Ukrainian commercial CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

Kindeditor traverse the directory 0DAY-vulnerability warning-the black bar safety net

Author: sub - ↘meter Version: 3.4.2 Description: KindEditor is an open source HTML visual editor, mainly used to allow users on the site to get WYSIWYG editing effects, compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browser. KindEditor using JavaScript, you can seamlessly...

phpmyfamily Multiple Remote Vulnerabilities

Exploit for php platform in category web applications =========================================== phpmyfamily Multiple Remote Vulnerabilities =========================================== - Title : phpmyfamily Multiple Remote Vulnerabilities. - Affected Version : phpmyfamily = 1.4.2 - Vendor Site :...

phpMyFamily - Multiple Vulnerabilities

phpMyFamily - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-17-phpmyfamily-multiple-remote-vulnerabilities/ ''' - Title : phpmyfamily Multiple Remote...

phpMyFamily - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-17-phpmyfamily-multiple-remote-vulnerabilities/ ''' - Title : phpmyfamily Multiple Remote Vulnerabilities. - Affected Version : phpmyfamily =...

Многочисленные уязвимости в eSitesBuilder

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Cross-Site Scripting, SQL Injection и Full path disclosure уязвимостях в eSitesBuilder это украинская коммерческая CMS. Insufficient Anti-automation: http://site/forget.php В форме нет защиты от автоматизированных...

eSitesBuilder Cross Site Scripting / Path Disclosure / SQL Injection

Hello Full-Disclosure! I want to warn you about multiple vulnerabilities in eSitesBuilder. After previous vulnerabilities in eSitesBuilder SecurityVulns ID:10940, which I wrote earlier in June, there are Insufficient Anti-automation, Cross-Site Scripting, SQL Injection and Full path disclosure...

Mod-X Cross Site Request Forgery / Cross Site Scripting

Got bored and decided to break the new website of the company I work for. Throughout I'll be dropping two new exploits that were chained to allow the changing of the administrative password of a default mod-x install. This is not a full review of mod-x, my main goal was just to break something, s...

Vulnerabilities in Dataface Web Application Framework

Hello Bugtraq! I want to warn you about security vulnerabilities in Dataface Web Application Framework. ----------------------------- Advisory: Vulnerabilities in Dataface Web Application Framework ----------------------------- URL: http://websecurity.com.ua/4276/ -----------------------------...

CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello Bugtraq! I want to warn you about new security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. This is second advisory for this project. ------------------------------ Advisory: Day of bugs in WordPress 2: CSRF, Information Leakage...

Dataface 1.0 Cross Site Scripting / Path Disclosure

Hello Bugtraq! I want to warn you about security vulnerabilities in Dataface Web Application Framework. ----------------------------- Advisory: Vulnerabilities in Dataface Web Application Framework ----------------------------- URL: http://websecurity.com.ua/4276/ -----------------------------...

CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello 3APA3A! I want to warn you about new security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. This is second advisory for this project. ------------------------------ Advisory: Day of bugs in WordPress 2: CSRF, Information Leakage a...

Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello 3APA3A! I want to warn you about security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. ------------------------------ Advisory: Day of bugs in WordPress 2: Information Leakage and Full path disclosure vulnerabilities in WordPress...

Asterisk Recording Interface Cross Site Request Forgery / Cross Site Scripting / Denial Of Service / Local File Inclusion

Found By: TurboBorland Email: [email protected] Software: Asterisk Recording Interface Date Found: 07/01/2010 Ethical Disclosure: Site down, no other location for project, author can not be found, no one to get in touch with. Submission. Vulnerabilities: LFI steal voicemail only need to supply...

PHP-Nuke 8.1.0.3.5b Command Execution

PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...

Vulnerabilities in SimpNews

Hello Bugtraq! I want to warn you about security vulnerabilities in SimpNews. ----------------------------- Advisory: Vulnerabilities in SimpNews ----------------------------- URL: http://websecurity.com.ua/4245/ ----------------------------- Affected products: SimpNews V2.47.03 and previous...

PHP-Nuke <= 8.1.3.5 (Your_Account) Remote Command Exec Exploit

No description provided by source. PHP-Nuke = 8.1.0.3.5b Remote Command Execution Exploit Author/s: Dante90 & yawn Contact Us: www.unitx.net Requirements: magicquotesgpc : off Greetings: [email protected] | [email protected] You will remember, Watson, how the dreadful business of the Abernetty...