Fired Up Acting App Has Logic Design Flaws

Fired Up Acting app is an artist booking application launched by Beijing Fired Up Technology Co. There is a logical design vulnerability in the FIRE Performing Arts app. Attackers can use the vulnerability to perform arbitrary user registration, arbitrary password reset operations...

Easy Chat Server User Registeration Buffer Overflow (SEH)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Easy Chat Server User Registeration Buffer Overflow SEH', 'Description' = %q This module exploits a buffer overflow during user registration in Ea...

Easy Chat Server User Registeration Buffer Overflow (SEH) Exploit

This Metasploit module exploits a buffer overflow during user registration in Easy Chat Server software. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Easy Chat Server User Registeration Buffe...

WP Statistics Plugin for WordPress < 12.0.8 'functions.php' wp_statistics_searchengine_query() SQLi

According to its self-reported version and configuration, the WP Statistics Plugin for WordPress running on the remote web server is prior to 12.0.8 and user registration is enabled. It is, therefore, affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to...

WP Statistics SQL Injection vulnerability

Security experts at Sucuri have discovered a SQL Injection vulnerability in WP Statistics, one of the most popular WordPress plugins, that is currently installed on over 300,000 websites. The SQL Injection vulnerability in WP Statistics could be exploited by attackers, with at least a subscriber...

Word Diary App Has Multiple Vulnerabilities

Word Diary App is a word memorization app with situational semantics and English-English explanations. Word Diary APP has arbitrary user registration, arbitrary password reset and stored cross-site scripting attack vulnerabilities, which can be exploited by attackers to register any user,...

a-wow.ru XSS vulnerability

Vulnerable URL: http://a-wow.ru/user/register Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7485576 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted vi...

Weblate: Bypassing captcha in registration on Hosted site

Hello again, I believe the captcha on the user registration form is very simple and can be easily bypassed to automatically register any number of accounts. A program can read the math captcha, solve it and submit the form with the answer and the other required parameters & headers. Note: I read...

Drupal Closes Access Bypass Vulnerability in Core Engine

A critical vulnerability in the Drupal Core engine was addressed in an update released Wednesday. Drupal engineers are calling it an access bypass vulnerability and said a Drupal-based website is vulnerable only under certain conditions, including whether a site has the RESTful Web Services modul...

Coppermine Gallery 1.5.44 Directory Traversal

Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...

Joomla! 2.5.2 - Admin Creation Exploit

Exploit for php platform in category web applications !/usr/bin/python3 CVE-2012-1563: Joomla! = 2.5.2 Admin Creation cf import bs4 import requests import random url = 'http://vmweb.lan/joomla-cms-2.5.2/' formurl = url +...

Joomla! 2.5.2 - Admin Creation

Joomla! 2.5.2 - Admin Creation !/usr/bin/python3 CVE-2012-1563: Joomla! = 2.5.2 Admin Creation cf Source: https://www.ambionics.io/blog/cve-2016-9838-joomla-account-takeover-and-remote-code-execution import bs4 import requests import random url = 'http://vmweb.lan/joomla-cms-2.5.2/' formurl = url...

joomla create ordinary user vulnerability analysis(cve-2016-8870)-vulnerability warning-the black bar safety net

The experiment environment requirements Joomla version 3. 44 to 3. 63 Vulnerability analysis In joomla there are two user registration method: In the components/comusers/controllers/registration. in php UsersControllerRegistration::register In the components/comusers/controllers/user. in php...

EditMe CMS Cross-Site Request Forgery Vulnerability

EditMe CMS is a framework for building custom Web applications and Web CMS. A cross-site request forgery vulnerability exists in the user registration page of EditMe CMS, which can be exploited by an attacker to add an administrator account or elevate privileges to an administrator account...

CVE-2016-8870

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...

Design/Logic Flaw

The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4, when registration has been disabled, allows remote attackers to create user accounts by leveraging failure to check the Allow User Registration configuration setting...

CVE-2016-8870

CVE-2016-8870 affects Joomla! core (registration flow) prior to 3.6.4. The register method in UsersModelRegistration fails to respect the Allow User Registration setting, allowing remote creation of accounts even when registration is disabled. Exploitation details are documented across multiple s...

On the Joomla! Content management system vulnerability briefings-vulnerability warning-the black bar safety net

Recently, the national information security vulnerabilities library CNNVD received Beijing white cap Hui Technology Co., Ltd. on Joomla! Content management system there is a security bypass vulnerabilityCNNVD-2 0 1 6 1 0-7 3 9and the remote mention the right vulnerabilityCNNVD-2 0 1 6 1 0-7 4 0in...

Joomla! 3.4.4 3.6.4 - Account Creation Privilege Escalation

Joomla! 3.4.4 3.6.4 - Account Creation Privilege Escalation Source: https://github.com/XiphosResearch/exploits/tree/master/Joomraa While analysing the recent Joomla exploit in comusers:user.register we came across a problem with the upload whitelisting. They don't allow files containing SetHandle...

Joomla! 3.4.4 < 3.6.4 - Account Creation / Privilege Escalation

Source: https://github.com/XiphosResearch/exploits/tree/master/Joomraa While analysing the recent Joomla exploit in comusers:user.register we came across a problem with the upload whitelisting. They don't allow files containing SetHandler application/x-httpd-php Usage Choose the username, passwor...