escon supportportal pro 3.0 - Persistent Cross-Site Scripting

escon supportportal pro 3.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ESCON SupportPortal Pro Version: 3.0 Vendor Site: http://www.e-supportportal.com Software Download: http://www.e-supportportal.com/download.html Timeline: 29 May...

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting Blind SQL Injection Remote Code Execution

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting Blind SQL Injection Remote Code Execution / Exploit Title: Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE Date: Jul 22 2012 Author: muts Version: Ipswitch WhatsUp Gold 15.02 Vendor URL: http://www.ipswitch.com/ An attacker c...

gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting

gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting Exploit Title: gp easy CMS Minishop 1.5 plugin persistent XSS Date: july 2 2012 Exploit Author: Carlos Mario Penahos Hollmann Vendor Homepage:http://gpeasy.com/Download Software Link:...

gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting

Exploit Title: gp easy CMS Minishop 1.5 plugin persistent XSS Date: july 2 2012 Exploit Author: Carlos Mario Penahos Hollmann Vendor Homepage:http://gpeasy.com/Download Software Link: http://gpeasy.com/SpecialAddonPlugins?cmd=download&id=31 Version: 1.5 The vulnerable code is in the Minishop 1.5...

phpmoneybooks 1.03 - Persistent Cross-Site Scripting

phpmoneybooks 1.03 - Persistent Cross-Site Scripting Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link:...

Useresponse 1.0.2 - Privilege Escalation Remote Code Execution

Useresponse 1.0.2 - Privilege Escalation Remote Code Execution !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.co...

Useresponse <= 1.0.2 Privilege Escalation & RCE Exploit

Exploit for php platform in category web applications !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns...

vanilla kpoll plugin 1.2 - Persistent Cross-Site Scripting

Title: Vanilla kPoll 1.2 Stored XSS Date: 5/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla kPoll 1.2 http://vanillaforums.org/download http://vanillaforums.org/addon/kpoll-plugin To Create the XSS go to this lin...

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post you...

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting

Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post your XSS as tag. I used alert'xss' You will have to use a proxy /...

vBshop - Multiple Persistent Cross-Site Scripting Vulnerabilities

vBshop - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit Title: vBshop persistent XSS 0day Google Dork: "DragonByte Technologies Ltd" vbshout Date: 25/3/2012 9:32 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting fro...

osCommerce 3.0.2 - Persistent Cross-Site Scripting

osCommerce 3.0.2 - Persistent Cross-Site Scripting Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the G...

Sphinx Mobile Web Server <= 3.1.2.47 Multiple XSS Vulnerabilities - Active Check

Sphinx Mobile Web Server is prone to persistent cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PragmaMX 1.2.10 - Persistent Cross-Site Scripting

PragmaMX 1.2.10 - Persistent Cross-Site Scripting TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org...

PragmaMX 1.2.10 - Persistent Cross-Site Scripting

TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org ............................. VERSION . 1.12.0...

WordPress <= 3.3.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Trustwave's SpiderLabs Security Advisory TWSL2012-002: Multiple Vulnerabilities in WordPress Published: 1/24/12 Version: 1.0 Vendor: WordPress http://wordpress.org/ Product: WordPress Version affected: 3.3.1 and prior Product description:...

Netlog Social - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Netlog Social - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=345 Release Date: ============= 2011-12-24 Vulnerability Laboratory ID VL-ID: ==================================...

WordPress Redirection 2.2.9 Persistent Cross Site Scripting

No description provided by source. Title: Wordpress Redirection Plugin =2.2.9 Lazy XSS Date: 2011-10-05 Author: dotxed dotxedatgooglemail.com @dotxed Software Link: http://wordpress.org/extend/plugins/redirection/ Version: 2.2.9 tested ----------------------- Info ----------------------- One...

WordPress Redirection 2.2.9 Persistent Cross Site Scripting

Title: Wordpress Redirection Plugin alert1 to place your XSS inside the blog backend. ----------------------- Fix ----------------------- After contacting the writer of this plugin, he rolled out a new version. Version 2.2.10 is not affected by these XSS issues. More information can be seen on...

network tracker .95 - Persistent Cross-Site Scripting

network tracker .95 - Persistent Cross-Site Scripting Exploit Title: Network Tracker .95 Stored XSS Date: 08-18-2011 Author: G13 Software link: http://networktracker.org/ Version: .95 ISSUE The application contains a option which allows anyone to create a user. If this option is left enabled an...