Eventy Plus Cross-Site Request Forgery (Add Admin) Vulnerability

Eventy Plus suffers from a Cross-Site Request Forgery Add Admin Vulnerability. + Author: TUNISIAN CYBER + Exploit Title: Eventy Plus Cross-Site Request Forgery Add Admin Vulnerability + Date: 03-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352 + Vendor:...

Subrion CMS 3.1.1跨站请求伪造漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://www.subrion.com/product.html + Friendly Sites:...

Savsoft Quiz Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Savsoft Quiz Cross-Site Request Forgery Add Admin Vulnerability + Date: 24-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352 + Vendor: http://savsoftquiz.com/web/buy-now/ +...

Subrion 3.1.1 Cross Site Request Forgery

Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://www.subrion.com/product.html + Friendly Sites: na3il.com,th3-creative.com 1.OVERVIEW: Subrion suffers...

Subrion v3.1.1 Cross-Site Request Forgery (CSRF) Vulnerability

Subrion CMS 3.1.1 cross site request forgery exploit that adds an administrator. + Author: TUNISIAN CYBER + Exploit Title: Subrion v3.1.1 Cross-Site Request Forgery CSRF Vulnerability + Date: 22-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor:...

MODx Evogallery Shell Upload

Author: TUNISIAN CYBER + Exploit Title: MODx Evogallery File Upload Vulnerability + Date: 18-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://modx.com/extras/package/evogallery + Friendly Sites: na3il.com,th3-creative.com 1.OVERVIEW: MODx's module Evogallery...

MODx (Evogallery) File Upload Vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: MODx Evogallery File Upload Vulnerability + Date: 18-02-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + Vendor: http://modx.com/extras/package/evogallery + Friendly Sites:...

TomatoCart 1.1.8.6 Local File Inclusion

Author: TUNISIAN CYBER + Exploit Title: TomatoCart 1.1.8.6 Local File Inclusion Vulnerability + Date: 14-02-2014 + Category: WebApp + Tested on: KaliLinux + Vendor: http://www.tomatocart.com/ + Friendly Sites: na3il.com,th3-creative.com 1.OVERVIEW: TomatoCart 1.1.8.6 old versions too suffers from...

TomatoCart 1.1.8.6 Local File Inclusion Vulnerability

TomatoCart version 1.1.8.6 suffers from a local file inclusion vulnerability. + Author: TUNISIAN CYBER + Exploit Title: TomatoCart 1.1.8.6 Local File Inclusion Vulnerability + Date: 14-02-2014 + Category: WebApp + Tested on: KaliLinux + Vendor: http://www.tomatocart.com/ + Friendly Sites:...

WordPress Kiddo Theme "uploadify.php"任意文件上传漏洞

WordPress Kiddo是WordPress的儿童主题。 WordPress Kiddo的/wp-content/themes/kiddo/app/assets/js/uploadify/uploadify.php脚本允许上传任意扩展名的文件到webroot的文件夹内，如果上传的文件包含恶意PHP脚本，即可导致执行任意PHP代码。 0 WordPress Kiddo 1.x 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

PHP Live Streaming Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: PHP Webcam Live Streaming XSS Vulnerability + Date: 07-02-2014 + Category: WebApp + Google Dork: : + Tested on: KaliLinux + Vendor: http://sourceforge.net/projects/phplivestream/ + Friendly Sites: na3il.com,th3-creative.com +Description: VideoWhisper Live...

Singapore 0.9.9b / 0.9.10 Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: singapore v0.9.9b/0.9.10 admin.php POST Cross Site Scripting Vulnerability + Date: 05-02-2014 + Category: WebApp + Google Dork: : + Tested on: KaliLinux + Vendor: http://sourceforge.net/projects/singapore/ + Friendly Sites: na3il.com,th3-creative.com...

Maian Uploader 4.0 XSS / SQL Injection / Disclosure

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

Maian Uploader v4.0 <= (SQLi/Disclosure/XSS) Vulnerabilities

Maian Uploader v4.0 is suffer from multiple vulnerabilities remote attacker can exploit some bugs like SQL Injection , XSS and disclosure the target full path. ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz -----------------------------------------...

Wordpress Plugin (wp-e-commerce v3.8.9.5) Multiple Vulnerabilities

Wordpress Plugin wp-e-commerce v3.8.9.5 - File Upload - RCE - LFI - XSS/CSRF ----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a...

Imageview 6.x Shell Upload

Author: TUNISIAN CYBER + Exploit Title: Imageview File Upload vulnerability + Date: 20-01-2014 + Category: WebApp + Google Dork: : + Tested on: KaliLinux + Friendly Sites: na3il.com,th3-creative.com +Exploit: Imageview Suffers from a File Upload Vulnerability which allows the attacker to upload a...

Autoresponder PRO Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: Follow up Autoresponder PRO Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: : + Tested on: KaliLinux + Vendor: http://www.scripts4webmasters.com/ + Friendly Sites: na3il.com,th3-creative.com +Description: Web based...

Web eXperts Shell Upload / SQL Injection

Author: TUNISIAN CYBER + Exploit Title: Web eXperts FileUpload/SQLi vulnerabilities + Date: 14-01-2014 + Category: WebApp + Google Dork: :intext:"Website Design & Developed By Web eXperts" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Web eXperts suffers from a File Upload/SQLi...

WordPress DT Chocolate Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress DT Chocolate jplayer.swf Cross Site Scripting vulnerability + Date: 13-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress Theme DT...

Joomla Melody Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: Joomla Component commelody XSS Vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"components/commelody/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: The Joomla melody component suffers from an xss vulnerability...