PT-2011-1798

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 2.01 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the post-title parameter in the "admin/changedata.php" endpoint...

CVE-2010-4863: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

LightNEasy 3.4.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================================= LightNEasy 3.4.2 Multiple Vulnerabilities =========================================================================...

CVE-2010-4848

Multiple cross-site scripting XSS vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 title parameter...

PT-2011-1783

Name of the Vulnerable Software and Affected Versions AXScripts AxsLinks version 0.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the url or title parameters in the...

CVE-2010-4848: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 title parameter...

JlWeb SQL Injection

Exploit Title: JlWeb Sql Injection Vulnerability Date: 18/09/2011 06:21 Author: 3spi0n Software Link: http://www.jl-web.de/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "Design by JL Web" $ Demo Sites: http://www.sbybikes.be/lire/index.php?rubid=11" PhpSQLi As Close As A Breath...

WordPress Auctions 1.8.8 SQL Injection

Exploit Title: WordPress Auctions plugin @AlligatorTeam Software Link: http://downloads.wordpress.org/plugin/wp-auctions.zip Version: 1.8.8 tested --------------- PoC --------------- URL:...

CVE-2010-4837

Cross-site scripting XSS vulnerability in the JSupport comjsupport component 1.5.6 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the subject parameter title field in a saveTicket action to index2.php. NOTE: some of these details are obtained from third party...

Aika 0.2 - colladaconverter Xml Parsing Buffer Overflow

/ ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Exploit Title: Aika colladaconverter buffer overflow exploit Date: 09/11/2011 Author: isciurus Software Link: http://aika.googlecode.com/files/aika-v02.zip Version: 0.2 Tested...

WordPress Paid Downloads 2.01 SQL Injection

Exploit Title: WordPress Paid Downloads plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $downloadkey = $GET"downloadkey"; $sql = "SELECT FROM ".$wpdb-prefix."pddownloadlinks WHERE downloadkey = '".$downloadkey."'"; $linkdetails =...

WordPress SCORM Cloud 1.0.6.6 SQL Injection

Exploit Title: WordPress SCORM Cloud plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 e.g.: curl --data "action=addAnonRegGetLaunchUrl&inviteid=-1' AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " http://www.site.com/wp-content/plugins/scormcloud/ajax.php...

Heap overflow

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

CVE-2011-2594

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

CVE-2011-2594: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field...

WordPress SearchAutocomplete 1.0.8 SQL Injection

Exploit Title: WordPress SearchAutocomplete plugin getresults"SELECT posttitle As name, ID as postid, guid AS url, 1 cnt FROM ".$wpdb-prefix."posts t WHERE poststatus='publish' and posttype='post' OR posttype='page' and postdate NOW and posttitle LIKE '%".$GET'term'."%' ORDER BY posttitle";...

PT-2011-3944

Name of the Vulnerable Software and Affected Versions KMPlayer versions 3.0.0.1441 and possibly other versions Description A heap-based buffer overflow issue allows remote attackers to execute arbitrary code via a playlist .KPL file with a long Title field. Recommendations For KMPlayer version...

yahoo! player 1.5 (.m3u) Universal Buffer Overflow (SEH)

No description provided by source. !/usr/bin/perl Exploit Title: yahoo! player 1.5 .m3u Universal Buffer Overflow SEH Date: 27/08/2011 Author: D3r K0n!G Software Link: http://www.clubic.com/lancer-le-telechargement-8059-0-yahoo-player.html Version: 1.5.01.409 Tested on: Windows XP SP3 CVE : N/A...

Free MP3 CD Ripper 1.1 Local Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title : Free MP3 CD Ripper 1.1 Local Buffer Overflow Software : http://www.brothersoft.com/free-mp3-cd-ripper-84543.html Version : 1.1 Tested on : Windows xp sp3 en Date : 27/08/2011 Author : X-h4ck Website : http://www.pirate.al ,...

WordPress SendIt plugin <= 1.5.9 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using...