Wordpress Plugins - Nmedia user file uploader Shell Upload Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - Nmedia user file uploader Shell Upload Vulnerability Version : 1.8 Link : http://wordpress.org/extend/plugins/nmedia-user-file-uploader/ Plugins :...

WordPress Plugin Foxypress 0.4.1.1 < 0.4.2.1 - Arbitrary File Upload

Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/foxypress/ Author : Samm...

Wordpress Foxypress Plugin 0.4.1.1 - 0.4.2.1 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-2012 Google Dor...

Xtemplate Shell Upload

Exploit Title: Xtemplate shell upload Date: 4/6/12 Author: Th3-Skywalk3r Email : [email protected] Category:: webapps Google dork: /xtemplates/eng/ Tested on: Windows 7 & BT5r2 Demo site: http://www.deadseashop.co.il/inc/xtemplates/eng/fileedit.php...

PHP Volunteer Management System 1.0.2 Cross Site Scripting / Shell Upload

Exploit Title: PHP Volunteer Management System v 1.0.2 Multiple Vulnerabilities Date: 05/28/12 Author: Ashoo Mail: [email protected] Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Tested on: IIS6.0-Windows 2003 ToC 1.0 Introduction 2.0 Unrestricted File Upload 3...

Concrete CMS 5.5 Shell Upload / Denial Of Service

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

CMS-AhMeBa Professional Shell Upload

Exploit Title: CMS-AhMeBa Profesional fckeditor Arbitrary File Upload Vendor: Macronia.cl Vulnerability: Arbitrary File Upload Date: May 19, 2012 Author: Shinee [email protected] @shinee Tested on: linux -Exploit http://site.cl/FCKeditor/editor/filemanager/connectors/uploadtest.html...

Travelon Express CMS 6.2.2 XSS / Shell Upload / SQL Injection

Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Date: ===== 2012-05-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=530 VL-ID: ===== 530 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: =============...

Efront 3.6.11 Cross Site Scripting / Shell Upload

Exploit Title : Efront Multiple Vulnerabilities Author : IrIsT.Ir & Sec4Ever.com Discovered By : L3b-r1'z Home : http://IrIsT.Ir & http://Sec4Ever.com P Blob : http://L3b-r1z.com/ Software Link : http://www.efrontlearning.net Security Risk : High Version : 3.6.11 Tested on : win\XP Dork :...

Car Portal CMS v3.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Introduction: ============= Car Portal is a php software product for running auto classifieds websites. It provides functionality for the private sellers to sign up, list their c...

Car Portal CMS 3.0 - Multiple Vulnerabilities

Car Portal CMS 3.0 - Multiple Vulnerabilities Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product fo...

Car Portal CMS 3.0 - Multiple Vulnerabilities

Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product for running auto classifieds websites. It provid...

WordPress Organizer 1.2.1 XSS / CSRF / Shell Upload

Exploit for php platform in category web applications I want to warn you about multiple security vulnerabilities in plugin Organizer for WordPress. This is the second in series of advisories concerning vulnerabilities in this plugin. These are Cross-Site Scripting reflected and persistent,...

WordPress Organizer 1.2.1 XSS / CSRF / Shell Upload

Hello list! I want to warn you about multiple security vulnerabilities in plugin Organizer for WordPress. This is the second in series of advisories concerning vulnerabilities in this plugin. These are Cross-Site Scripting reflected and persistent, Cross-Site Request Forgery and Arbitrary File...

Car Portal CMS v3.0 - Multiple Web Vulnerabilities

Document Title: =============== Car Portal CMS v3.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=502 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 502...

Solmetra Flash Uploader Demo Shell Upload Vulnerability

Exploit for php platform in category web applications Solmetra Flash Uploader Demo Shell Upload Vulnerability Exploit Title: Solmetra Flash Uploader Demo Shell Upload Vulnerability Date: 21-04-2012 Author: Arm4dill0.DZ Vendor or Software Link: http://www.solmetra.com/en/ Version: Demo ;1.02...

ZachWhite File Uploader Shell Upload Vulnerability

Exploit for php platform in category web applications ZachWhite.com File Uploader Shell Upload Vulnerability Exploit Title: ZachWhite.com File Uploader Shell Upload Vulnerability Date: 15-04-2012 Author: Arm4dill0.DZ Vendor or Software Link: http://www.zachwhite.com/ Version: All Versions...

Simple Help Desk Remote Upload Vulnerability

Exploit for php platform in category web applications Author : L3b-r1'z Title : Simple Help Desk Remote Upload Vulnerability Email : email protected Site : Sec4Leb.Com Download : http://simplehelpdesk.com/helpdeskfinal.zip Dork : allintitle: "Help Desk - Log In" Upload Vuln + P0c : First Register...

OpenCart 1.5.2.1 LFI / Shell Upload / Response Splitting

waraxe-2012-SA084 - Multiple Vulnerabilities in OpenCart 1.5.2.1 =============================================================================== Author: Janek Vind "waraxe" Date: 06. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-84.html Description of vulnerable software:...

w-CMS 2.0.1 CSRF / XSS / File Disclosure / Shell Upload

+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...