LiteRadius <= 3.2 - Multiple Blind SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: LiteRadius 80 www.websiteauditing.org www.areyousecure.net Shouts to the Belegit crew 0day.today 2018-04-08...

Webcat multiple blind defect and repair-vulnerability warning-the black bar safety net

Exploit Title: Webcat - two blind defect Google Dork: allinurl: scwebcat/ecat/cmsview.php Date: 6/23/2011 Author: w0rd w0rdatNULL0x00.com Software Link: http://webcat.sourceforge.net/ Tested on: Linux/Windows 7 Vulnerable Parameters: webid=, id= PoC:...

NetServe Web Server v1.0.58 Multiple Remote Vulnerabilities

Summary NetServe is a super compact Web Server and File Sharing application for Windows NT, 95, 98, 2000, and XP. It's HTTP Web Server can serve all types of files including html, gif and jpeg, actually any files placed in your NetServe directory can be served. New key features include...

Tugux CMS 1.2 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications Title: Tugux CMS 1.2 Multiple Remote Vulnerabilities ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Vendor: Tugux Studios...

Tugux CMS 1.2 XSS / LFI / SQL Injection / URL Redirection

Title: Tugux CMS 1.2 Multiple Remote Vulnerabilities ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Vendor: Tugux Studios ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Product web page: http://www.tugux.com...

OpenEMR 3.2.0 - SQL Injection Cross-Site Scripting

OpenEMR 3.2.0 - SQL Injection Cross-Site Scripting Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management, Electronic...

Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ============================================================== Front Accounting 2.3RC2 Multiple SQL Injection Vulnerabilities ============================================================== Affected Applications: Front Accounting v2.3RC2; other...

CVE-2010-2005

Multiple PHP remote file inclusion vulnerabilities in DataLife Engine DLE 8.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the selectedlanguage parameter to engine/inc/include/init.php, 2 the configlangs parameter to engine/inc/help.php, 3 the configlang parameter to...

Shutter 0.1.4 Blind SQL Injection

Exploit Title: Shutter 0.1.4 Blind SQL Injection Date: March 18, 2010 Author: Blake Software Link: http://sourceforge.net/projects/shutter-php/files/shutter/v0.1.4/shutter0.1.4.zip/download Version: version 0.1.4 The albumID and photoID parameters are vulnerable to SQL Injection. POC:...

Cross-site scripting cookie theft

Added: 03/09/2010 Background Many web sites include scripts, which are lists of commands which, when executed in sequence, provide some enhancement to a web page. Web browsers are able to recognize scripts in web pages by the tag and handle them accordingly. Problem By sending an HTTP request...

ProCheckUp Security Advisory 2009.15

PR09-15: XSS injection vulnerability within HP System Management Homepage Insight Manager Vulnerability found: 11th October 2009 Severity: Medium Description: A XSS vulnerability has been found within HP System Management; Arising from insufficient input filtering. By using a specially-crafted...

Apache Geronimo 2.1.3 - Multiple Directory Traversal Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-018 Application: Apache Geronimo Application Server Versions Affected: 2.1 - 2.1.3 Vendor URL: http://geronimo.apache.org/ Bug: Directory Traversal File Upload Exploits: YES Reported: 10.12.2008 Vendor response: 10.12.2008 Solution: YES Da...

Apache Geronimo 2.1.x - '/console/portal/Server/Monitoring' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/34562/info Apache Geronimo Application Server is prone to multiple remote vulnerabilities: - Multiple directory-traversal vulnerabilities - A cross-site scripting vulnerability - Multiple HTML-injection vulnerabilities - A cross-site request-forgery...

PT-2008-6798 · Bloofox · Bloofoxcms

Name of the Vulnerable Software and Affected Versions: BloofoxCMS version 0.3.4 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved via the lang, theme, and module parameters in the plugins/spaw2/dialogs/dialog.php file...

XSS vulnerability in social bookmarking plugin bundled in Confluence

The social bookmarking plugin is bundled in Confluence 2.7.x and Confluence 2.6.x. As such this vulnerability affects all 2.7.x and 2.6.x instances even if you do not use the plugin or do not have the Add Bookmark Web Item enabled. The updatebookmark.action URL is vulnerable on these parameters: ...

PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection

PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection Vulnerabilities found: 16 November 2007 Vendor informed: 19 November 2007 Vulnerability fixed: 28 November 2007 Severity: High Description: Multiple vulnerabilities were found on Absolute...

tutorialcms-sql.txt

!/usr/bin/perl -w TutorialCMS alert'http://www.w4ck1ng.com' PoC: http://victim.com/search.php?search=' UNION SELECT 0,0,0,0,username, password,0,0,0,0,0,0,0 FROM users WHERE id='1' / Subject To: magicquotesgpc set to off GoogleDork: "Powered By Photoshop Tutorials" 0 Results Shoutz: The entire...

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC- By Umesh Wanve targetFile = "C:\Research\activegs\ActiveGS.ocx" prototype = "InvokeUnknown Slot52 As String" memberName = "Slot52" progid = "ActiveGSLib.ActiveGS" argCount...

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow (PoC)

Second Sight Software - ActiveGS.ocx ActiveX Buffer Overflow PoC Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC- By Umesh Wanve targetFile = "C:\Research\activegs\ActiveGS.ocx" prototype = "InvokeUnknown...

Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC

Exploit for unknown platform in category dos / poc ============================================================== Second Sight Software ActiveGS.ocx ActiveX Buffer Overflow POC ============================================================== Second Sight Software ActiveGS.ocx ActiveX Buffer Overflo...