MailUp 1.3.2 - ajax.functions.php Ajax Function Call H&ling XSS Weakness

The MailUp newsletter sign-up form WordPress plugin was affected by an ajax.functions.php Ajax Function Call H XSS Weakness security vulnerability...

OL-Commerce 2.1.1 Cross Site Scripting / SQL Injection Vulnerabilities

OL-Commerce version 2.1.1 suffers from cross site scripting and remote SQL injection vulnerabilities. OL-Commerce v2.1.1 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:...

Envoy: Stored XSS on sign_up page

Register using ";alert1" as the full name. As soon as you are logged in after completing the registration, you will see a pop-up. See the screenshot attached...

IRCCloud: Sign up CSRF

Again sir, There is no mitigation against CSRF attacks on the regsitration, I believe when not fixed you will be flooded with reports by researchers regarding this. Sign up for a free account / Pricing You’re signing up to join the team. Sign up By signing up, you agree to our Terms of Service...

RelateIQ: open redirect

go to https://www.relateiq.com/sign-up 2. Fill the form and click on signup free button. 3. Intercept the request using tamper data and change the 'retURL' parameter to any value like https://google.com any evil url and submit the request. 4. The web app redirect to any evil website...

WordPress User Role Editor 3.12 Cross Site Request Forgery

WordPress User Role Editor plugin version 3.12 suffers from a cross site request forgery vulnerability Exploit Title: WP User Role Editor CSRF Date: 19/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage:https://wordpress.org/support/plugin/user-role-edito...

Social Engine 4 Cross Site Scripting

===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :----------------------------------------------------------------------------------------------------------------------------------------...

JBoss RichFaces Online Persistent Xss Vulnerability

No description provided by source. Name : RichFaces Online Persistent Xss Vulnerability Date : Sept,1 2010 Vendor Url : http://exadel.com/web/portal/home Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt special thanks to : r0073r inj3ct0r.com,L0rd...

JBoss RichFaces Online Persistent Xss Vulnerability

Exploit for php platform in category web applications =================================================== JBoss RichFaces Online Persistent Xss Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

ReVou Micro Blogging Cross Site Scripting

--------------------------------------- ReVou Micro Blogging Cross Site Scripting --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : ReVou Micro Blogging How To Do It : 1- Sign up 2- Sing in 3-...

EPIC FAIL: new user signups result in plain text email with all login details

After signing up to a JIRA instance, I got an email which simply amazed me - it contained: My username My email address My full name My password It was all there, right before me, in a plain-text unencrypted email sent across a public network. WTF?! I'm not sure which universe that's considered a...

WebMember 1.0 SQL Injection

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...

XSS vulnerability in Mojo Mail Sign-Up Form

Heya, this is my first post here so go easy on me plz. I posted about this on the Mojo Bug Tracker ages ago and it's just been ignored, and besides, Im losing faith in reporting to the vendor, PHP Arena took the credit for an XSS bug I found in their paFileDB. But anyway, Mojo Mail doesn't filter...