Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)

Description The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues Edit WPScanTeam: - The original report mentioned the issue...

CVE-2016-10957

The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter...

CVE-2016-10957

The CVE-2016-10957 entry relates to the Akal WordPress theme (premium) and describes a Reflected/XSS vulnerability in the preview.php endpoint under framework/brad-shortcodes/tinymce, exploitable via the sc parameter. Multiple connected documents corroborate an XSS flaw affecting Akal up to 2016-...

CVE-2017-17641

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

Sql injection

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

CVE-2017-17641

CVE-2017-17641 affects Resume Clone Script 2.0.5, with a SQL injection in the preview.php id parameter. The root cause is an unsafely constructed SQL query using the id input, allowing a remote attacker to inject commands and potentially access or alter the database (Impact: partial to high in co...

CVE-2017-17641

Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter...

RPi Cam Control <= 6.3.14 - Multiple Vulnerabilities

Exploit for hardware platform in category remote exploits Exploit Title: RPi Cam Control = v6.3.14 RCE Multiple Vulnerabilities - preview.php Date: 16/08/2017 Exploit Author: Alexander Korznikov Vendor Homepage: https://github.com/silvanmelchior/RPiCamWebInterface Software Link:...

RPi Cam Control < 6.3.14 - Multiple Vulnerabilities

Exploit Title: RPi Cam Control = v6.3.14 RCE Multiple Vulnerabilities - preview.php Date: 16/08/2017 Exploit Author: Alexander Korznikov Vendor Homepage: https://github.com/silvanmelchior/RPiCamWebInterface Software Link: https://github.com/silvanmelchior/RPiCamWebInterface Version: = v6.3.14 Dat...

RPi Cam Control < 6.3.14 - Remote Command Execution

RPi Cam Control = v6.3.14 RCE preview.php Multiple Vulnerabilities A web interface for the RPi Cam Vendor github: https://github.com/silvanmelchior/RPiCamWebInterface Date 16/08/2017 Discovered by @nopernik https://www.linkedin.com/in/nopernik http://www.korznikov.com RPi Cam Control = v6.3.14 is...

CVE-2016-9128

Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vulnerable to a reflected XSS attack. This vulnerability could be used by an attacker to steal the session ID of an authenticated user, by tricking them into visiting a specifically crafted U...

Cross site scripting

Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vulnerable to a reflected XSS attack. This vulnerability could be used by an attacker to steal the session ID of an authenticated user, by tricking them into visiting a specifically crafted U...

CVE-2016-9128

Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vulnerable to a reflected XSS attack. This vulnerability could be used by an attacker to steal the session ID of an authenticated user, by tricking them into visiting a specifically crafted U...

CVE-2016-9128

Revive Adserver before 3.2.3 suffers from reflected XSS. The affiliate-preview.php script in www/admin is vulnerable to a reflected XSS attack. This vulnerability could be used by an attacker to steal the session ID of an authenticated user, by tricking them into visiting a specifically crafted U...

PHP Forum Script 3.0 SQL Injection

Exploit Title: PHP Forum Script v3.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/php-forum-script/ Demo: http://demo.phpjabbers.com/index.php?demo=pfs&front=1&lid=1 Version: 3.0 Tested on: Win7 x64, Kali Linux...

Simple PHP Blog 0.8.4 Cross Site Scripting

======================================================================== | Title : Simple PHP Blog 0.8.4 XSS vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 0.8.4 | Vendor : https://sourceforge.net/projects/sphpblog/ |...

Akal Theme - Reflected Cross-Site Scripting (XSS)

The premium theme, Akal, suffers from a Reflected Cross-Site Scripting XSS vulnerability in the preview.php file located in framework/brad-shortcodes/tinymce. PoC...

Akal Theme - Reflected Cross-Site Scripting (XSS)

The premium theme, Akal, suffers from a Reflected Cross-Site Scripting XSS vulnerability in the preview.php file located in framework/brad-shortcodes/tinymce...

WordPress Instagram 1.1.0 Cross Site Scripting

Exploit Title : WordPress Instagram Plugin 1.1.0 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/ Software Link : https://wordpress.org/plugins/instalinker/ Date: 2016/02/04 Version : 1.1.0 Vulnerable code : File Name: instalinker-admin-preview.php...

Datalife Engine 9.7 preview.php Bindshell

?php // Exploit Title: Datalife Engine 9.7 Bindshell Exploit // Date: 13/12/2015 // Exploit Author: ssbostan // Vendor Homepage: http://dleviet.com/ // Version: == 9.7 // Tested on: Datalife Engine 9.7 // CVE: http://www.cvedetails.com/cve/CVE-2013-1412/...