Installation Path Disclosure Weakness in MyBB

High-Tech Bridge SA Security Research Lab has discovered a weakness in MyBB which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in MyBB The weakness exists due to application reveals the full path to installation directory in an...

Installation Path Disclosure Weakness in Tribiq CMS | HTB22640

High-Tech Bridge SA Security Research Lab has discovered a weakness in Tribiq CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tribiq CMS The weakness exists due to application reveals the full path to installation...

Aprox CMS Engine V6 Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================ Aprox CMS Engine V6 Multiple Vulnerabilities ============================================ Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities Date: 03.10.2010 Author: Stephan Sattler //...

Aprox CMS Engine 6 Path Disclosure / SQL Injection

Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities Date: 03.10.2010 Author: Stephan Sattler // http://www.solidmedia.de Software Website: http://www.aprox.de/ Software Link: http://www.aprox.de/index.php?page=d&application=zip&dateiname=AproxEnginev6 Version: 6 Vulnerability 1 Vulnerable...

Aprox CMS Engine 6.0 - Multiple Vulnerabilities

Aprox CMS Engine 6.0 - Multiple Vulnerabilities Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities Date: 03.10.2010 Author: Stephan Sattler // http://www.solidmedia.de Software Website: http://www.aprox.de/ Software Link:...

Aprox CMS Engine 6.0 - Multiple Vulnerabilities

Exploit Title: Aprox CMS Engine V6 Multiple Vulnerabilities Date: 03.10.2010 Author: Stephan Sattler // http://www.solidmedia.de Software Website: http://www.aprox.de/ Software Link: http://www.aprox.de/index.php?page=d&application=zip&dateiname=AproxEnginev6 Version: 6 Vulnerability 1 Vulnerable...

Многочисленные уязвимости в WordPress 2 и 3

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Information Leakage, Directory Traversal, Arbitrary File Deletion и Denial of Service уязвимостях в WordPress. Для всех этих атак нужно иметь доступ к админскому аккаунту, или иметь аккаунт с правами для...

Уязвимости в CMS MYsite

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Insufficeint Anti-automation уязвимостях в CMS MYsite это украинская коммерческая CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

CMS Mysite Cross Site Scripting / SQL Injection

Hello Full-Disclosure! I want to warn you about Full path disclosure, Cross-Site Scripting and SQL Injection vulnerabilities in CMS MYsite. It's Ukrainian commercial CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

phpmyfamily Multiple Remote Vulnerabilities

Exploit for php platform in category web applications =========================================== phpmyfamily Multiple Remote Vulnerabilities =========================================== - Title : phpmyfamily Multiple Remote Vulnerabilities. - Affected Version : phpmyfamily = 1.4.2 - Vendor Site :...

Kindeditor traverse the directory 0DAY-vulnerability warning-the black bar safety net

Author: sub - ↘meter Version: 3.4.2 Description: KindEditor is an open source HTML visual editor, mainly used to allow users on the site to get WYSIWYG editing effects, compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browser. KindEditor using JavaScript, you can seamlessly...

phpMyFamily - Multiple Vulnerabilities

phpMyFamily - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-17-phpmyfamily-multiple-remote-vulnerabilities/ ''' - Title : phpmyfamily Multiple Remote...

phpMyFamily - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-17-phpmyfamily-multiple-remote-vulnerabilities/ ''' - Title : phpmyfamily Multiple Remote Vulnerabilities. - Affected Version : phpmyfamily =...

Mod-X Cross Site Request Forgery / Cross Site Scripting

Got bored and decided to break the new website of the company I work for. Throughout I'll be dropping two new exploits that were chained to allow the changing of the administrative password of a default mod-x install. This is not a full review of mod-x, my main goal was just to break something, s...

Многочисленные уязвимости в eSitesBuilder

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Cross-Site Scripting, SQL Injection и Full path disclosure уязвимостях в eSitesBuilder это украинская коммерческая CMS. Insufficient Anti-automation: http://site/forget.php В форме нет защиты от автоматизированных...

eSitesBuilder Cross Site Scripting / Path Disclosure / SQL Injection

Hello Full-Disclosure! I want to warn you about multiple vulnerabilities in eSitesBuilder. After previous vulnerabilities in eSitesBuilder SecurityVulns ID:10940, which I wrote earlier in June, there are Insufficient Anti-automation, Cross-Site Scripting, SQL Injection and Full path disclosure...

CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello Bugtraq! I want to warn you about new security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. This is second advisory for this project. ------------------------------ Advisory: Day of bugs in WordPress 2: CSRF, Information Leakage...

Vulnerabilities in Dataface Web Application Framework

Hello Bugtraq! I want to warn you about security vulnerabilities in Dataface Web Application Framework. ----------------------------- Advisory: Vulnerabilities in Dataface Web Application Framework ----------------------------- URL: http://websecurity.com.ua/4276/ -----------------------------...

Dataface 1.0 Cross Site Scripting / Path Disclosure

Hello Bugtraq! I want to warn you about security vulnerabilities in Dataface Web Application Framework. ----------------------------- Advisory: Vulnerabilities in Dataface Web Application Framework ----------------------------- URL: http://websecurity.com.ua/4276/ -----------------------------...

Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello 3APA3A! I want to warn you about security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. ------------------------------ Advisory: Day of bugs in WordPress 2: Information Leakage and Full path disclosure vulnerabilities in WordPress...