TextAds 2.08 Cross Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

Vallen Zipper 2.30 - .zip Heap Overflow

Vallen Zipper 2.30 - .zip Heap Overflow !/usr/bin/perl +Exploit Title: Vallen Zipper V2.30 .ZIP File Heap Overflow +Date: 11\04\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.vallen.de/freeware/vzsetup.exe +Version: 2.30 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use...

Design/Logic Flaw

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message...

CVE-2010-4781: Exposure of Sensitive Information to an Unauthorized Actor

index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation path in an error message...

PT-2011-1729

Name of the Vulnerable Software and Affected Versions Enano CMS versions prior to 1.1.8 Enano CMS versions 1.0.6pl3 and earlier Enano CMS version 1.1.7pl1 Description The issue allows remote attackers to obtain sensitive information via a crafted title parameter, which reveals the installation pa...

Banner Ad Management Script - SQL Injection

Exploit Title : Banner Ad Management Script Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 02-04-2011 + Software Link: http://www.softbizscripts.com/banner-ads-management-script-features.php + category: Web Apps SQli + HomePage : Black-hat.cc...

GOM Media Player 2.1.6.3499 Denial Of Service

!/usr/bin/perl +Exploit Title: GOM Media Player 2.1.6.3499 0day Buffer overflow/DOS Exploit +Software Link: download.cnet.com/GOM-Media-Player/3000-21394-10701768.html +Software : GOM Media Player +Version : 2.1.6.3499 +Tested On : WIN-XP SP3 + Date : 31.03.2011 + Hour : 3:37 PM Similar Bug was...

Word List Builder 1.0 Buffer Overflow

Exploit Title: Word List Builder Buffer Overflow ExploitSEH Software Link: http://download.cnet.com/Word-List-Builder/3000-185414-10398336.html Version: 1.0 triggering details : open .dic file Tested on: Win XP SP3 French Date: 31/03/2011 Author: h1ch4m Hicham Oumounid Email: [email protected] Home:...

GOM Media Player 2.1.6.3499 - Buffer Overflow (Denial of Service) (PoC)

!/usr/bin/perl +Exploit Title: GOM Media Player 2.1.6.3499 0day Buffer overflow/DOS Exploit +Software Link: download.cnet.com/GOM-Media-Player/3000-21394-10701768.html +Software : GOM Media Player +Version : 2.1.6.3499 +Tested On : WIN-XP SP3 + Date : 31.03.2011 + Hour : 3:37 PM Similar Bug was...

PT-2011-2615

Name of the Vulnerable Software and Affected Versions WP Related Posts plugin version 1.0 Description The issue affects the configuration screen in wp-relatedposts.php, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hijack the...

If-CMS 2.07 Local File Inclusion

!/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

PT-2011-1706

Cross-site scripting XSS vulnerability in submitnews.php in e107 before 0.7.23 allows remote attackers to inject arbitrary web script or HTML via the submitnews title parameter, a different vector than CVE-2008-6208. NOTE: some of these details are obtained from third party information. NOTE: thi...

DEBIAN-CVE-2011-0700

Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...

CVE-2011-0700

Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...

CVE-2011-0700

Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to 1 the Quick/Bulk Edit title aka post title or posttitle, 2 poststatus, 3 commentstatus, 4 pingstatus, and 5 escaping of tags...

N`CMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit

Exploit for php platform in category web applications !/usr/bin/python INFORMATION Exploit Title: NCMS 1.1E Pre-Auth Local File Inclusion Remote Code Exploit Date: 11/3/2011 Software link: http://bit.ly/eJAyw5 Tested on: Linux bt Version: 1.1E PHP.ini Settings: gpcmagicquotes = Off Note: The web...

vTiger CRM 5.0.4 - Local File Inclusion

!/usr/bin/python INFORMATION: Exploit Title: Vtiger CRM 5.0.4 Pre-Auth Local File Inclusion Exploit Google Dork: "The honest Open Source CRM" "vtiger CRM 5.0.4" Date: 5/3/2011 CVE: CVE-2009-3249 Windows link: http://bit.ly/fiOYCL Linux link: http://bit.ly/hluzLf Tested on: Windows XP/Linux Ubuntu...

SnapProof (cart.php) Cross Site Scripting

Exploit Title: SnapProof cart.php Cross Site Scripting Google Dork: inurl:"Created and powered by SnapProof" home : www.D99Y.com Date: 1/3/2011 Author: Difficult 511 Software Link: http://www.snapproof.com/ file : cart.php exploit : http://localhost/cart.php?retPageID= XSS...

iOS myDBLite 1.1.10 - Directory Traversal

iOS myDBLite 1.1.10 - Directory Traversal Exploit Title : myDBLite v1.1.10 for iPhone / iPod touch, Directory Traversal Date: 02/24/2011 Author: R3d@l3rt, Sp@2K, Sp@2K, Sunlight, H@ckk3y Software Link: http://itunes.apple.com/kr/app/mydb-lite/id335521112?mt=8 Version: 1.1.10 Tested on: iPhone, iP...

CVE-2011-1063: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...