Kryn CMS 0.6 Cross Site Request Forgery / Cross Site Scripting

Found By: TurboBorland Email Address: [email protected] Software: Kryn =0.6 Date Found: 06/21/2010 Date Submitted: 06/29/2010 Ethical Disclosure: Vendor submitted - Replied with fix: "We've fix this issues and already uploaded the new versions for kryn-core and usermanagement." - Submission to...

Joomla AWD Song Cross Site Scripting

================================================ Joomla comawdsong persistent xss Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Joomla Component com_awd_song persistent XSS Vulnerability

Exploit for php platform in category web applications ========================================================== Joomla Component comawdsong persistent XSS Vulnerability ==========================================================...

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities

OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities Redspin Security Notice -- RSN-2010-01 Multiple vulnerabilities in OpenEMR Electronic Medical Record Software Overview ---------------- Quote from http://www.oemr.org/ OpenEMR is a free medical practice management, electron...

Joomla JomSocial 1.6.288 Cross Site Scripting

Exploit Title: Joomla Component JomSocial 1.6.288 Multiple XSS Vulnerabilities Date: 26 March 2010 Author: jdc Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out...

Joomla Component com_community Persistent Xss Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comcommunity Persistent Xss Vulnerability ===========================================================...

Joomla Listbingo 1.3 SQL Injection / Cross Site Scripting

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

Joomla JFaq 1.2 SQL Injection / Cross Site Scripting

Exploit Title: Joomla Component JFaq 1.2 Multiple Vulnerabilities Date: 11 May 2010 Author: jdc Version: 1.2 Tested on: PHP5, MySQL5 "title" input SQL injection --------------------------- title', select concatusername,char32,password from users where gid=25 limit 1, 1, 1, 1, 1, 1 -- ' id SQL...

Joomla! Component RSComments 1.0.0 - Persistent Cross-Site Scripting

Exploit Title: Joomla Component RSComments 1.0.0 Multiple XSS Vulnerabilities Date: 18 May 2010 Author: jdc Software Link: http://www.rsjoomla.com Version: 1.0.0 Tested on: PHP5, MySQL5 Name Field Persistent XSS -------------------------...

Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Joomla! Component comlistbingo 1.3 - Multiple Vulnerabilities Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL...

Joomla! Component com_joomdocs - Cross-Site Scripting

Date : june, 18 2010 Vendor url :http://www.axxis.gr/ Critical Level : HIGH Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,gunslinger greetz to :All ICW members and my friends : luv y0 guyz Description: Super Messenger allows users of your...

Havij 1.10 Cross Site Scripting

Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Software Link: http://itsecteam.com/files/Havij%201.10.rar Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By :...

Joomla! Component com_joomdocs - Cross-Site Scripting

Joomla! Component comjoomdocs - Cross-Site Scripting Date : june, 18 2010 Vendor url :http://www.axxis.gr/ Critical Level : HIGH Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,gunslinger greetz to :All ICW members and my friends : luv y0 guyz...

Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

Havij 1.10 - Persistent Cross-Site Scripting

Havij 1.10 - Persistent Cross-Site Scripting Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By : Hkhexon...

Hexjector 1.0.7.2 - Persistent Cross-Site Scripting

Exploit Title: Hexjector Persistent XSS ".""; $url2 is not filtered so XSS codes can be executed. You would need to find a site that is vulnerable either to XSS or SQL Injection to generate this vulnerability.A site that is vulnerable to XSS only will also work because my Hexjector will not stop...

IP.Board (IPB) 3.0.x Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================= IP.Board IPB 3.0.x Persistent XSS Vulnerability ================================================= Date: 05/14/2010 Author: Cryptovirus Software Link: http://community.invisionpower.com/ Version...

Joomla Component com_frontpage Persistent XSS Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comfrontpage Persistent XSS Vulnerability =========================================================== +Title Joomla Component comfrontpage Persistent XSS Vulnerabilit...

Tumblr.com Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Friendster.com Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...