1402 matches found
Maian Uploader 4.0 XSS / SQL Injection / Disclosure
----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...
Maian Uploader 4.0 - Multiple Vulnerabilities
Maian Uploader 4.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/65137/info Maian Uploader is prone to multiple security vulnerabilities, including: 1. An SQL-injection vulnerability 2. Multiple cross-site scripting vulnerabilities Attackers can exploit these issues to acce...
Maian Uploader 4.0 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/65137/info Maian Uploader is prone to multiple security vulnerabilities, including: 1. An SQL-injection vulnerability 2. Multiple cross-site scripting vulnerabilities Attackers can exploit these issues to access or modify data, exploit latent...
Maian Uploader v4.0 <= (SQLi/Disclosure/XSS) Vulnerabilities
Maian Uploader v4.0 is suffer from multiple vulnerabilities remote attacker can exploit some bugs like SQL Injection , XSS and disclosure the target full path. ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz -----------------------------------------...
Invision Power Board <= 3.3.4 PHP masscaner via Bing.com Shell Uploader
This is a PHP masscaner for IPB Edit then u will see this .\php\php.exe ipbmass.php word . Replace word with the word do you want to searc for forums . Save the file then double click on run.bat . The scanner will grep the urls with IPB forums then try to upload shell backdoor . The proccess of...
CVE-2013-6780
Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter...
CVE-2013-6780
CVE-2013-6780 is a cross-site scripting (XSS) vulnerability in Yahoo! YUI uploader.swf (Uploader component) affecting Yahoo! YUI versions 2.5.0 through 2.9.0. The flaw allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter. Public writeups reference the vul...
CVE-2013-6780
Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter...
WordPress Switchblade Themes Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Switchblade Themes Arbitrary File Upload Vulnerability Author: Byakuya...
WordPress Theme Switchblade 1.3 - Arbitrary File Upload
WordPress Theme Switchblade 1.3 - Arbitrary File Upload . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Switchblade Themes Arbitrary File Upload Vulnerability Author:...
WordPress Theme SAICO 1.0 < 1.0.2 - Arbitrary File Upload
. . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress SAICO theme Arbitrary File Upload Vulnerability Author: Byakuya Date: 10/19/2013 Vendor Homepage: http://themeforest.net/...
ClipBucket 2.6 Multi Exploits(Arbitrary File Uploader and XSS)
Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...
[jSQL Injection v0.5] Java tool for automatic database injection
jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. jSQL Injection change log - version 0.5 0.5 SQL shell Uploader 0.4 Admin page checker and preview Brute forcer md5...
VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability
========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...
VoltEdit CMS SQL Injection / Shell Upload Vulnerabilities
VoltEdit CMS suffers from administrative login bypass due to remote SQL injection and allows for PHP shells to be uploaded. Note that this finding houses site-specific data. ========================================================================================== VoltEdit CMS SQL Injection Admin...
CVE-2013-4941
Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...
CVE-2013-4942
Cross-site scripting XSS vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitra...
CVE-2013-4941
CVE-2013-4941 describes a Cross-site scripting (XSS) vulnerability in uploader.swf (Uploader component) of Yahoo! YUI 3.2.0–3.9.1, which is used in Moodle up to specific versions. The flaw allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. The affected s...
CVE-2013-4941
Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...