Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC

Zurmo-Stable-3.1.1-XSS-By-Provensec-LLC Zurmo-Stable-3.1.1 クロスサイトスクリプティング XSS 割り当てられたCVE番号: CVE-2017-7188...

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Blackcat-cms-v1.2-xss-POC-by-Provensec-llc BlackCat-CMS-Bundle-v1.2 Script intersites XSS Numéro CVE attribué : CVE-2017-9609...

Admidio-3.2.8-CSRF-POC-by-Provensec-llc

Admidio-3.2.8-CSRF-POC-от-Provensec-llc Admidio 3.2.8 Межсайтовая подделка запроса Cross-Site Request Forgery. Присвоен номер CVE: CVE-2017-8382 https://www.exploit-db.com/exploits/42005/ http://en.0day.today/exploit/27771...

Blackcat CMS 1.2 Cross Site Scripting

Exploit Title : Blackcat CMS XSS Vulnerability Date: 21/June/2017 Exploit Author: Faiz Ahmed Zaidi Organization: Provensec LLC Website: http://provensec.com/ Vendor Homepage: https://blackcat-cms.org/ Software Link: https://blackcat-cms.org/page/download.php Version: blackcatcmsv1.2Bundle Tested...

Black Cat CMS 1.1.2 Cross Site Scripting

​ Affected software: black cat cms Type of vulnerability:stored xss URL:http://blackcat-cms.org/ Discovered by: provensec Website: provensec.com version:BlackCat CMS 1.1.2 Proof of concept​ goto ad group page http://demo.opensourcecms.com/blackcat/backend/groups/index.php and and new group with...

PHPWCMS 1.5.4 Cross Site Request Forgery

​ Affected software: phpwcms Type of vulnerability:csrf URL:http://www.opensourcecms.com/demo/2/54/phpwcms Discovered by: provensec Website: provensec.com version:1.5.4 Proof of concept no csrf protections were used on directory creation page ​...

Zurmo CRM 3.0.2 Cross Site Scripting

​ Affected software: zurmo crm Type of vulnerability:xss stored URL:zurmo.com http://demo.zurmo.com/ Discovered by: provensec Website: provensec.com version:N/A Proof of concept​ goto profile section http://demo.zurmo.com/demos/stable/app/index.php/home/default and edit the whats going on field...

Paperlink Balance 710 Cross Site Request Forgery

​​ Affected software: paperlink balance 710 Type of vulnerability:csrf URL:peplink.com Discovered by: provensec Website: provensec.com version:710 Proof of concept​ a new manager can be added using csrf attack ​...

Gargoyle 1.5.x Command Execution

Affected software: Gargoyle router management utility Type of vulnerability:code execution URL:http://www.gargoyle-router.com/ Discovered by: provensec Website: provensec.com version:1.5.X Built 20140215-1506 git@505e8dc Proof of concept vulnerable paramter= "commands"' POST /utility/runcommands....

Vevocart 6.1.0 Open Redirect

Affected software: vevocart Type of vulnerability:url redirection URL:vevocart.com Discovered by: provensec Website: provensec.com version:VevoCart 6.1.0 Proof of concept http://multistore1.vevocart.com/admin/Login.aspx?ReturnUrl=%2f%2fgoogle.com...

SolarWinds Network Performance Monitor Open Redirect

Affected software: SolarWinds Network Performance Monitor Type of vulnerability:url redirection URL:http://www.solarwinds.com/ Discovered by: provensec Website: provensec.com version:N/A Proof of concept http://oriondemo.solarwinds.com/Orion/Login.aspx?ReturnUrl=//google.com...

Simple Invoice 2011 Cross Site Scripting

Affected software: simple invoice Type of vulnerability:stored xss URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011 Proof of concept goto http://demo.simpleinvoices.org/index.php?module=paymenttypes&view=manage add new or edit some older payment type and fill th...

Simple Invoice 2011.1 Cross Site Request Forgery

Affected software: simple invoice Type of vulnerability:adding admin user via csrf URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011.1 Proof of concept...

Koala Framework 3.7 Cross Site Scripting

Affected software: koala-framework Type of vulnerability:xss URL:koala-framework.org Discovered by: provensec Website: provensec.com version: Version 3.7 Proof of concept http://cms-demo.koala-framework.org/admin/component/preview/?url=javascript:alert1...

BigAce CMS 3.0 Cross Site Scripting

Affected software: bigace cmc Type of vulnerability:cross site scripting URL:http://demo.bigace.de/ Discovered by: provensec Website: provensec.com version: 3.0 Proof of concept http://site/xsspayload demo:http://demo.bigace.de/%22%3E%3Cimg%20src=d%20onclick=confirm%281%29;%3E...

n2cms 2.2.1 Path Disclosure

Affected software: n2cms Type of vulnerability:full path disclosure URL:n2cms.com Discovered by: provensec Website: provensec.com version: 2.2.1 Proof of concept http://demo.n2cms.com/N2/Files/FileSystem/File.aspx?selected=%2fupload%2f%22%3E%3Cimg%20src=d%20onerror=confirm1;%3E1.php%2f manipulati...

AdaptCMS 3.0 Cross Site Scripting

Affected software: adaptcms Type of vulnerability:xss URL:adaptcms.com Discovered by: provensec Website: provensec.com version: AdaptCMS 3.0 Proof of concept goto site/category/ add new category with xss payload " open category and javascript will execute...

gpEasy CMS 4.4 Cross Site Scripting

Affected software: gpeasy cms Type of vulnerability:stored xss URL:gpeasy.com Discovered by: provensec Website: provensec.com version: gpEasy 4.4 Proof of concept goto edit layout and fill filed with xss payload " and save it javascript will execute --20cf303f64d02dcd89051578f782 Content-Type:...

FlatPress 1.0 Cross Site Scripting

Affected software: FlatPress 1.0 Type of vulnerability:stored xss URL:http://www.opensourcecms.com/scripts/details.php?scriptid=77&name=FlatPress Discovered by: provensec Website: provensec.com version: FlatPress 1.0 Proof of concept adding a new entry with xss payload will lead to stored cross...

log2space 6.2 Cross Site Scripting

Affected software: log2space Type of vulnerability:xss URL:http://www.spacecom.co.in/ Discovered by: provensec Website: provensec.com version: 6.2 Proof of concept http://host/cgi/transerr.php?pagePop=popup&errMsg=%22%3E%3Cimg%20src=d%20onerror=confirm1;%3E...