CVE-2011-5173

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field in a bed file...

CVE-2011-5173: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Bugbear Entertainment FlatOut 2005 allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long string in the title field in a bed file...

PT-2012-2150

Name of the Vulnerable Software and Affected Versions Bugbear Entertainment FlatOut 2005 Description The issue is related to a buffer overflow that can be triggered by a long string in the title field in a bed file, potentially allowing user-assisted remote attackers to cause a denial of service...

CVE-2012-4890

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

CVE-2012-4890

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

SiteGo - Remote File Inclusion

SiteGo - Remote File Inclusion Exploit Title: SiteGo Remote File Inclusion Vulnerability Date: 10/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link: http://site-go.com/free/site-go.zip Tested on:...

CVE-2012-4890: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS 2011 08.09.2 and earlier allow remote attackers to inject arbitrary web script or HTML via a 1 comment to the news, 2 title to the news, or 3 the folder names in a gallery...

Dornica CMS SQL Injection

dornica Cms Sql Injection Vulnerability + Exploit Title : dornica Cms Sql Injection Vulnerability + Google Dork :Powered And Designed By PersianSoft.org & powered by dornica + Autor : Siamak.Black + Download : http://www.dornica.net/ + MAil : [email protected] + Tested on: BackTrack , 7...

CVE-2006-7247: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Weblinks comweblinks component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter...

PT-2012-1256

Name of the Vulnerable Software and Affected Versions Joomla! versions 1.0.9 and earlier Mambo versions 1.0.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the title parameter. Recommendations For Joomla! versions 1.0.9 and...

Essential Website Design CMS SQL Injection

Exploit Title : essentialwebsitedesign Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.essentialwebsitedesign.net Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 file names to apps/userldap/settings.php; 2 url or 3 title parameter to apps/bookmarks/ajax/editBookmark.php; 4 tag or 5 page parameter to...

PhpFox 3.0.1 Cross Site Scripting

Exploit Title: phpFox Version 3.0.1 Cross site Scripting Vulnerability Google Dork: Intext:"Powered By phpFox Version 3.0.1" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.phpfox.com/ Tested on: all ================================== +...

PT-2012-3782

Name of the Vulnerable Software and Affected Versions Fancy Slide module versions prior to 6.x-2.7 Description The issue allows remote authenticated users with the administer fancy slide permission to inject arbitrary web script or HTML. This can be achieved via the node title or nodequeue title...

Douran Portal 3.9.8.25 SQL Injection

The last version of this portal which used by own company, have SQL Injection bug: http://www.douran.com/homepage.aspx?site=DouranPortal&tabid=1SQLi&lang=fa-IR Ver: DOURAN Portal V3.9.8.25 Exploit Title: Douran Portal SQLi Vulnerability Date: 08/31/2012 Author: Persia Security Group - Prince &...

CWE CMS Cross Site Scripting

Exploit Title: CWE. cms Cross site Scripting Vulnerability Google Dork: Intext:"Powered by CWE." Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.code-corner.com Tested on: all ================================== simplekeyword in cms.php is Vulnerable to xss...

Booking System Pro - Cross-Site Request Forgery

Exploit Title: Booking System Pro CSRF Vulnerability Date: 28/08/2012 Author: DaOne @LibyanCA Vendor: http://www.neptunescripts.com/products Price: $39 CSRF Add Admin...

CVE-2012-1296

Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...

CVE-2012-1296: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...

PT-2012-3183

Name of the Vulnerable Software and Affected Versions Elefant CMS versions 1.0.x through 1.0.2-Beta Elefant CMS versions 1.1.x through 1.1.5-Beta Description The issue allows remote attackers to inject arbitrary web script or HTML via the title or body parameter to the "admin/preview" endpoint...