SEO Toaster E-Commerce 2.2.0 Cross Site Scripting

Affected software: http://demo.seotoaster.com Type of vulnerability: clickjacking Version: E-Commerce 2.2.0 URL: http://www.seotoaster.com/ Discovered by: Provensec Website: http://www.provensec.com Description:Free SEO Software & CMS: All in One Proof of concept seo toaster search filed was vuln...

EVO-CMS 2.1.0 Cross Site Request Forgery

Affected software: evo cms Type of vulnerability: adding new admin csrf URL: http://www.evo-german.com/ Discovered by: Provensec Website: http://www.provensec.com version:EVO-CMS 2.1.0 Proof of concept attacker was able to add new admin as there were no protection against csrf poc poc: input...

4images Cross Site Scripting / Clickjacking

Affected software: 4images Type of vulnerability: clickjacking,xss URL: http://www.4homepages.de/ Discovered by: Provensec Website: http://www.provensec.com Description: 4images is a powerful web-based image gallery management system. Features include comment system, user registration and...

Ilch CMS Cross Site Request Forgery

Affected software: Ilch cms Type of vulnerability: csrf URL: http://www.ilch.de/ Discovered by: Provensec Website: http://www.provensec.com Description: Ilch cms profile field csrf Proof of concept http://demo.opensourcecms.com/ilch/admin.php?profilefields online demo Above field was vulnerable t...

Kimai.org Cross Site Request Forgery

Affected software: http://kimai.org Type of vulnerability: csrf URL: http://demo.kimai.org Discovered by: Provensec Website: http://www.provensec.com Description: csrf vulnerability in status edit mechanism due to no csrf token Proof of concept:...

Clockingit.com Cross Site Scripting

Affected software: clockingit.com Type of vulnerability: persistent xss URL: clockingit.com Discovered by: Provensec Website: http://www.provensec.com Description: peristet xss issue Proof of concept victim can be exploited by just sending the link to the victim To execute this vector goto regist...

OroCRM - Stored XSS Vulnerability

No description provided by source. Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec Labs...

MyITCRM Cross Site Scripting

Description :Free and Open source CRM Software for your Repairs and Servicing Business! vendor:http://demo.myitcrm.com/ author:provensec type:stored xss exploit: 1 Goto http://demo.myitcrm.com/index.php?page=supplier:new&pagetitle=New%20Supplifr%20Page 2 click on html refer screenshot ==...

OroCRM - Stored XSS Vulnerability

Exploit for php platform in category web applications Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Autho...

OroCRM - Persistent Cross-Site Scripting

Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec Labs Type of vulnerability: XSS Stored...

OroCRM Cross Site Scripting

Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec Labs Type of vulnerability: XSS Stored...

OroCRM - Persistent Cross-Site Scripting

OroCRM - Persistent Cross-Site Scripting Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec...

Radiant CMS Cross Site Scripting

Affected software: demo.radiantcms.org Discovered by: Provensec Website: http://www.provensec.com Author:Ankit Bharathan,Provensec Labs Type of vulnerability: XSS Stored Description: 1 Goto http://demo.radiantcms.org/admin/layouts 2 Add new layout with name as xss payload alert&40/1/&41 3 Save it...

Olat Stored Cross Site Scripting

Affected software: //demo.olat.org/ Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: Stored XSS Author: Ankit Bharathan ,Provensec labs Description: Goto personal folder open any folder and create a new document xss.tct and then edit it fill field with " Then open...

vtiger.com Cross Site Scripting

Affected software: vtiger.com Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Description: Paydirt is currently integrated with Chrome and Firefox 1 Goto site.vtiger.com/index.php?module=Contacts&view=List 2 add new contact fill fields with xss payload...

Jappix Cross Site Scripting

Affected software: https://jappix.org/ Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Description: Jappix is a new, smart and powerful social platform. We think each of us should own his own data, that’s why we’ve made Jappix decentralized. Jappix is...

Fatt Free CRM Cross Site Scripting

Hello Guys this is Sam , CEO and Chief Security Architect Provensec LLC . Please take note of the following submission. Affected software: Fatt Free CRM - URL: http://www.fatfreecrm.com/ Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Fat Free CRM is a...

Feng Office - Stored XSS

No description provided by source. Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management,...

Feng Office Cross Site Scripting

Affected software: Feng Office - URL: http://www.fengoffice.com/web/demo.php Discovered by: Provensec Website: http://www.provensec.com Type of vulnerability: XSS Stored Feng Office is a Collaboration tool that includes a CRM, Communication, Document Management, Tasks, E-mails, Documents, Interna...

PerfectView CRM Cross Site Scripting

Affected software: PerfectView CRM Description: PerfectView CRM is a software for Relationship Management, Marketing & Sales Type of vulnerability: XSS Persistent URL: http://perfectviewcrm.com Discovered by: Provensec Website: http://www.provensec.com Description: PerfectView is prone to a...