Apple Safari WebKit CSS Title Memory Corruption (CVE-2012-3684)

A memory corruption vulnerability has been reported in WebKit, a component of Apple Safari. The vulnerability is due to improper handling of a CSS style for a title element. A remote attacker can exploit this issue by enticing a target user to open a specially crafted file. Successful exploitatio...

WordPress ArribaLaEsteban SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title:Wordpress | ArribaLaEsteban theme SQL Injection Vulnerability | Google Dork: inurl:/estadisticas/fichajugador.php Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

Friendsinwar FAQ Manager XSS / SQL Injection

Exploit Title: friendsinwar FAQ Manager SQL Injection authbypass Vulnerability Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage: http://www.friendsinwar.com Software Link: http://www.friendsinwar.com/scriptdemo/thefaqmanager/ Tested on: Windows 7 Blog: d3b4g.me...

MYRE Realty Manager XSS / SQL Injection

Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me ---------------------------------------------------------------------------------- SQL...

iDev Rentals 1.0 - Multiple Vulnerabilities

iDev Rentals 1.0 - Multiple Vulnerabilities Title: ====== iDev Rentals v1.0 - Multiple Web Vulnerabilities Date: ===== 2012-11-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=760 VL-ID: ===== 758 Common Vulnerability Scoring System: ==================================...

MYREphp Business Directory Cross Site Scripting / SQL Injection

Exploit Title: Myrephp Business Directory, Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/biz/ Tested on: Windows 7 Blog: d3b4g.me ---------------------------------------------------------------------------------...

AwAuctionScript (Aw Auction Script - Market Place for WebMasters) Multiple Vulnerabilities

========================================================================================== AwAuctionScript Aw Auction Script - Market Place for WebMasters Multiple Vulnerabilities ==========================================================================================...

CVE-2012-4485

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

CVE-2012-4485

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

PT-2012-5431

Name of the Vulnerable Software and Affected Versions Gallery formatter module versions prior to 7.x-1.2 Description The issue allows remote authenticated users with permissions to create a node or entity to inject arbitrary web script or HTML via the title or alt parameter in the galleryformatte...

CVE-2012-4485: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the galleryformatterfieldformatterview functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or...

CVE-2011-5211

Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...

PT-2012-2188

Name of the Vulnerable Software and Affected Versions Subrion CMS version 2.0.4 Description A cross-site scripting XSS issue exists in the poll module, allowing remote attackers to inject arbitrary web script or HTML via the title field. Recommendations For Subrion CMS version 2.0.4, consider...

CVE-2011-5211: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the poll module in Subrion CMS 2.0.4 allows remote attackers to inject arbitrary web script or HTML via the title field. NOTE: some of these details are obtained from third party information. NOTE: this might overlap CVE-2012-5452...

MyBB Profile Albums Plugin 0.9 - 'albums.php?album' SQL Injection

Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:"powered by Mybb" Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux. ---------------------------------------------- The...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...

CVE-2012-5349: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 link, 2 title, or 3 dl parameter...

PT-2012-5944

Name of the Vulnerable Software and Affected Versions Pay With Tweet plugin versions prior to 1.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the link, title, or dl...

CVE-2012-1416

Multiple cross-site request forgery CSRF vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrator accounts via a membernew action to myadmin/admin1members.php or 2 modify the default site title via a save action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in product/commerceproduct.module in the Drupal Commerce module for Drupal before 7.x-1.2 allow remote authenticated users to inject arbitrary web script or HTML via the 1 sku or 2 title parameters...