CVE-2013-3515

Multiple cross-site scripting XSS vulnerabilities in OpenX Source 2.8.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 package parameter to www/admin/plugin-index.php or the 2 group parameter to www/admin/plugin-settings.php...

Sql injection

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

CVE-2013-3532

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

Multiple code executions - ownCloud

A code executions vulnerability in ownCloud 4.5.6 and 4.0.11 and all prior versions allow authenticated remote attackers to execute arbitrary PHP code via unspecified POST parameters to translations.php in /core/ajax/ Commits: 74e73bc stable4, ece08cd stable45 Risk: Critical A code executions...

CVE-2012-5665

ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of userwebdavauth and userldap by editing this file...

CVE-2012-5665

ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of userwebdavauth and userldap by editing this file...

CVE-2012-5665

ownCloud 4.0.x before 4.0.10 and 4.5.x before 4.5.5 does not properly restrict access to settings.php, which allows remote attackers to edit app configurations of userwebdavauth and userldap by editing this file...

Server: XSS vulnerability in user_webdavauth

A cross-site scripting XSS vulnerability in ownCloud 4.5.x before 4.5.2 allow remote attackers to inject arbitrary web script or HTML via the POST data to settings.php in apps/userwebdavauth/ For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

Code injection

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

CVE-2012-5385

install/index.php in Craig Knudsen WebCalendar before 1.2.5 allows remote attackers to modify settings.php and possibly execute arbitrary code via vectors related to the user theme preference...

Cross site scripting

Cross-site scripting XSS vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to the "$conf variable in settings.php."...

CVE-2012-2703

Cross-site scripting XSS vulnerability in the Advertisement module 6.x-2.x before 6.x-2.3 for Drupal, when debug mode is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to the "$conf variable in settings.php."...

WebCalendar 1.2.4 Pre-Auth Remote Code Injection

This module exploits a vulnerability found in k5n.us WebCalendar, version 1.2.4 or less. If not removed, the settings.php script meant for installation can be update by an attacker, and then inject code in it. This allows arbitrary code execution as www-data. Module Options msf use...

Hosting Directory Cross Site Request Forgery

Exploit Title: Hosting Directory CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/hosting-directory-script/27433/ Category:: webapps Demo : http://www.e-soft24.com/scripts/hosting-directory/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com Our web host directory...

BPSwoopo CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: BPSwoopo CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/bpswoopo-penny-auction-script-like-swoopo/27766/ Category:: webapps Demo : http://www.icloudcenter.net/demos/ICPenny/ Greetz: Inj3ct0r...

BPowerItaliano CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: BPowerItaliano CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/bpoweritaliano-unique-low-bid-auction-italian-ver/27150/ Category:: webapps Demo :...

BlueSoft Auction CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: BlueSoft Auction CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/bluesoft-auction-site-script/31334/ Category:: webapps Demo : http://shopbluesoft.com/demo4/control/login.php Greetz: Inj3ct0r...

AV Arcade Pro 5.4.3 Cookie Manipulation

========================================== AV Arcade Pro 5.4.3 By pass Seting Exploit ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --' ' -'--'---| 1 1 ;...

Ignition 1.3 (comment.php) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Ignition 1.3 ========================================= Greetz: all member | manadocoding.org - sekuritiOnline.net friends: angky.tatoki, EA ngel, bL4Ck3n91n3, 0pa, x0r0n, teamelite, thama, devilbat, cr4wl3r, cyberl0g, lumut-, AntiHack, DskyMC,...