CVE-2013-4941

Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...

Et-Chat 3.07 Privilege Escalation / Shell Upload

Exploit Title: Et-chat 3.07 user id Parameter Remote code execution Exploit Author: MR.XpR Script Download : http://et-chat.ir/up/etchatv307.zip Risk : Normal Platforms : PHP Tested on: 7 , KAli , Vista Date : 2013 -====================- How does : This error occurs due to keep cookies Exploit :...

Joomla! 2.5.x < 2.5.10 / 3.0.x < 3.0.4 Multiple Vulnerabilities

According to its self-identified version number, the Joomla! installation hosted on the remote web server is 2.5.x prior to 2.5.10 or 3.0.x prior to 3.0.4. It is, therefore, affected by multiple vulnerabilities : - A security bypass vulnerability exists due to a failure to properly verify...

FreeBSD : Joomla! -- XXS and DDoS vulnerabilities (57df803e-af34-11e2-8d62-6cf0490a8c18)

The JSST and the Joomla! Security Center report : 20130405 - Core - XSS Vulnerability Inadequate filtering leads to XSS vulnerability in Voting plugin. 20130403 - Core - XSS Vulnerability Inadequate filtering allows possibility of XSS exploit in some circumstances. 20130402 - Core - Information...

Joomla! -- XXS and DDoS vulnerabilities

The JSST and the Joomla! Security Center report: 20130405 - Core - XSS Vulnerability Inadequate filtering leads to XSS vulnerability in Voting plugin. 20130403 - Core - XSS Vulnerability Inadequate filtering allows possibility of XSS exploit in some circumstances. 20130402 - Core - Information...

WordPress Plugin Uploader - blog Cross-Site Scripting

WordPress Plugin Uploader - blog Cross-Site Scripting source: https://www.securityfocus.com/bid/58285/info The Uploader Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

WordPress Uploader Plugin <= 1.0.4 - Cross Site Scripting

WordPress Uploader plugin's "blog" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin Uploader - 'blog' Cross-Site Scripting

source: https://www.securityfocus.com/bid/58285/info The Uploader Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

EAFlash Uploader Remote File Upload vulnerability

Exploit for php platform in category web applications Exploit Title: "EAFLASH Uploader Remote File Upload vulnerability Author: NEtBomber Contact: http://facebook.com/net.bomba Software Link: http://www.easyalgo.com/eaflashupload.aspx Google Dork: o.O u can find 1 Tested on: Linux/Windows POC: Th...

[20130404] - Core - XSS Vulnerability

Use of old version of Flash-based file uploader leads to XSS vulnerability...

Bohemian Arbitary File Upload vulnerability

Exploit for php platform in category web applications Exploit Title: "Bohemian Arbitary File Upload Author: NEtBomber Contact: http://facebook.com/net.bomba Software Link: http://bohemiawebsites.com/component/option,comjdownloads/Itemid,382/cid,71/task,view.download/ Google Dork:intext:"CURRENT...

Wordpress Valums Uploader - File Upload Vulnerability

Title: ====== Wordpress Valums Uploader - File Upload Vulnerability Date: ===== 2013-01-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=817 VL-ID: ===== 817 Common Vulnerability Scoring System: ==================================== 7.5 Abstract: ========= The...

Uploader Plugin for WordPress File Upload Arbitrary Code Execution

The Uploader Plugin for WordPress installed on the remote host is affected by a file upload vulnerability due to a failure to properly verify or sanitize user-uploaded files. An unauthenticated, remote attacker can exploit this issue to upload files with arbitrary code and then execute them on th...

WordPress File Uploader Plugin PHP File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress File Uploader Plugin PHP File Upload Vulnerability Date: 01/21/2013 Google Dork: inurl:"wp-file-uploader.php" Exploit Author: email protected - http://la.usch.io -...

Nibbleblog 3.4 Path Disclosure / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Joomla Component com_performs component arbitary file upload

Exploit for php platform in category web applications Exploit Title: Joomla Comperforms component arbitary file upload Google Dork: inurl:index.php?option=comperforms upload cv Date: 2012-09-27 Exploit Author: Mormoroth Vendor Homepage: http://www.performs.org.au/ Version: 2.4 and prior Tested on...

WordPress Valums Uploader Shell Upload

Exploit Title: Wordpress Valums Uploader Shell Upload Exploit Date: 4-1-2013 Author: JingoBD Tested on: Windows 7 And Ubuntu Team: BANGLADESH CYBER ARMY Greetz: ManInDark,Rex0Man,Evil AXE,Bedu33n,NEEL,AXIOM, And All Of My BCA Friends. They Rockz. :D ALSO ALL BANGLADESHI Hacker Team...

Eptonic - Valums Uploader Shell Upload Exploit

The eptonic WordPress theme was affected by a Valums Uploader Shell Upload Exploit security vulnerability...

Wordpress Valums Uploader - File Upload Vulnerability

Document Title: =============== Wordpress Valums Uploader - File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=817 Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 817...

Wordpress Valums Uploader - File Upload Vulnerability

Document Title: =============== Wordpress Valums Uploader - File Upload Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=817 Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 817...