Post Revolution 0.8.0c Multiple Remote Vulnerabilities

info ——————————— Name : Post Revolution 0.8.0c Multiple Remote Vulnerabilities Class: Design Error && Input Validation Error CVE: CVE-2011-1952, CVE-2011-1953, CVE-2011-1954 Remote: Yes Local: No Credit : Javier Bassi javierbassi at gmail dot com Vulnerable : All versions prior to and including...

Lost Door J-Revolution Denial of Service Vulnerability

This host is running Lost Door J-Revolution and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gblostdoordosvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Lost Door J-Revolution Denial of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone...

Lost Door J-Revolution Denial of Service Vulnerability

Lost Door J-Revolution is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Post Revolution 0.8.0c XSS / XSRF / Denial Of Service

info ——————————— Name : Post Revolution 0.8.0c Multiple Remote Vulnerabilities Class: Design Error && Input Validation Error CVE: CVE-2011-1952, CVE-2011-1953, CVE-2011-1954 Remote: Yes Local: No Credit : Javier Bassi Vulnerable : All versions prior to and including 0.8.0c are affected. Vendor...

MODx Revolution 2.0.8-pl Cross Site Request Forgery

Exploit Title: MODx Revolution 2.0.8-pl CMS XSRF Vulnerability Add new user + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Demo Link : http://www.cmsagora.com/demo.php?id=50&type=2 + Demo Login: Username: admin Password: demo123...

MODx Revolution 2.0.8-pl CMS XSRF Vulnerability (Add new user)

Exploit for php platform in category web applications + Exploit Title: MODx Revolution 2.0.8-pl CMS XSRF Vulnerability Add new user + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Demo Link : http://www.cmsagora.com/demo.php?id=50&type=2 + Demo Login: Username:...

BackTrack 5 "revolution" will Release on May 10th, 2011

BackTrack 5 "revolution" will Release on May 10th, 2011 As BackTrack 5 development rolls on full steam ahead, we've been getting numerous questions about the future release. We thought we'd publish a blog post with general information about BT5 for the impatient. The codename of this release will...

Press Release - Who are Anonymous & What Anonymous represents !

Just now, Anonymous hackers Release a new press note for the people of world. The words are as given below : Dear Citizens of the World. There has been some confusion among the media about who/what anonymous is/represents. There have also been questions asked about the input from Anonymous during...

Anonymous Hackers message to LunarPages for removing personal page of Libyan dictator Colonel Muammar al-Gadaffi !

Anonymous Hackers message to LunarPages for removing personal page of Libyan dictator Colonel Muammar al-Gadaffi ! NOTE : One More Press Released By Anonymous Hackers on there official site/Facebook/Twitter. We are Publishing This news, just as the Media of "Hacking Field" . These is No relation...

Operation Bahrain ( #opbahrain ) - Anonymous Press Release !

Operation Bahrain opbahrain - Anonymous Press Release ! Dear Free-Thinking Citizens of THE WORLD, The Bahrainian government has shown by its actions that it intends to brutally enforce its reign of injustice by limiting free speech and access to truthful information to its citizens and the rest o...

Facebook Owned 42% of Egyptian Web Traffic Before Blackout

How important a role did Facebook play in the popular revolution that swept Egypt last week? According to data from security firm zScaler: it was very important. Fully 42% of the country’s Web surfing on January 27, the day before Egypt’s main ISPs abruptly severed ties to the Internet. Activity ...

MODx Evo 1.0.4 (and prior) SQL Injection and Directory Traversal Vulnerabities

Status: Solved Product: MODx Evolution Severity: High Versions: 1.0.4 and prior Advisory Date: 2011-01-26 Fixed Date: 2011-01-19 Impact: a A remote attacker may access or view arbitrary files on the server. b A remote attacker may execute arbitrary PHP code as a result of SQL injection. Descripti...

Critical PHP Bug Security Notice and Patch

Earlier this week, a PHP Security Notice was made due to a critical bug in PHP that could cause PHP to fail should a value of 2.2250738585072011e-308 be set to a PHP value. More information can be found here: http://bugs.php.net/bug.php?id=53632...

Critical Security Upgrade Notice for FormIt, Quip and Login

We received a report of a potential vulnerability in FormIt, Quip and Login that could be used to expose system settings including database information. This has been been corrected and new versions have been posted. Upgrading of FormIt, Login and Quip to the latest versions via Package Manager...

MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability ===================================================================== getObject'modUser',array 30: 'use...

MODx REvolution CMS 2.0.4-pl2 - POST injection Cross-Site Scripting

MODx REvolution CMS 2.0.4-pl2 - POST injection Cross-Site Scripting getObject'modUser',array 30: 'username' = $POST'username', 31: ; ... 71: else if !empty$POST'forgotlogin' 72: $c = $modx-newQuery'modUser'; 73: $c-selectarray'modUser.','Profile.email','Profile.fullname'; 74: $...

MODx Revolution CMS Cross Site Scripting

getObject'modUser',array 30: 'username' = $POST'username', 31: ; ... 71: else if !empty$POST'forgotlogin' 72: $c = $modx-newQuery'modUser'; 73: $c-selectarray'modUser.','Profile.email','Profile.fullname'; 74: $c-innerJoin'modUserProfile','Profile'; 75: $c-wherearray 76: '...

MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability

Summary MODx Revolution is a powerful PHP Content Management Framework that plays nicely with custom code and helps you build sites faster and maintain them with ease. With Revolution you'll leverage the best things to come around since MVC and Active Record. Description The MODx Revolution CMS...

MODx REvolution CMS 2.0.4-pl2 - POST injection Cross-Site Scripting

getObject'modUser',array 30: 'username' = $POST'username', 31: ; ... 71: else if !empty$POST'forgotlogin' 72: $c = $modx-newQuery'modUser'; 73: $c-selectarray'modUser.','Profile.email','Profile.fullname'; 74: $c-innerJoin'modUserProfile','Profile'; 75: $c-wherearray...

phpThumb Command-Injection Vulnerability

It has recently come to our attention that phpThumb all versions contains an unpatched vulnerability. The application is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input to the ’fltr’ parameter in the ’phpThumb.php’ script. Attackers can explo...