CVE-2018-1000084

WolfCMS 0.8.3.1 contains a stored XSS vulnerability in the Layout Name field (Layout tab). The underlying issue allows a low-privilege user to steal an admin’s cookies and compromise the administrator account. The attack is described as exploitable by entering JavaScript code into the Layout Name...

CVE-2018-1000087

CVE-2018-1000087 – WolfCMS 0.8.3.1 has a reflected cross-site scripting vulnerability in the input boxes for “Create New File” and “Create New Directory” on the File tab. According to the connected sources, unsanitized input reflects back in the browser, enabling an attacker to inject JavaScript....

CVE-2018-1000087

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . This attack appear to be exploitable via Attacker c...

CVE-2018-1000084

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name from Layout tab that can result in low privilege user can steal the cookie of admin user and compromise the admin account. This attack appear to be exploitable via Need to enter the...

CVE-2018-1000084: Improper Neutralization of Input During Web Page Generation

WOlfCMS WolfCMS version version 0.8.3.1 contains a Stored Cross-Site Scripting vulnerability in Layout Name from Layout tab that can result in low privilege user can steal the cookie of admin user and compromise the admin account. This attack appear to be exploitable via Need to enter the...

CVE-2018-1000087: Improper Neutralization of Input During Web Page Generation

WolfCMS version version 0.8.3.1 contains a Reflected Cross Site Scripting vulnerability in "Create New File" and "Create New Directory" input box from 'files' Tab that can result in Session Hijacking, Spread Worms,Control the browser remotely. . This attack appear to be exploitable via Attacker c...

PT-2018-9263

Name of the Vulnerable Software and Affected Versions: WolfCMS version 0.8.3.1 Description: The issue concerns a Stored Cross-Site Scripting vulnerability in the Layout Name, accessible from the Layout tab. This can be exploited by entering Javascript code into the Layout Name, potentially allowi...

PT-2018-9266

Name of the Vulnerable Software and Affected Versions: WolfCMS version 0.8.3.1 Description: The issue concerns a Reflected Cross Site Scripting vulnerability in the "Create New File" and "Create New Directory" input boxes from the 'files' tab. This can lead to session hijacking, spreading worms,...

Exploit for Cross-site Scripting in Wolfcms Wolf_Cms

Wolfcms-v0.8.3.1-xss-P...

Wolf CMS 0.8.2 - Arbitrary File Upload (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'Wolfcms 0.8.2 Arbitrary PHP File Upload Vulnerability', 'Description' = %q This module exploits a file upload vulnerability in...

Wolfcms <= 0.75 Multiple Vulnerabilities (CSRF - XSS)

No description provided by source. +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 Multiple Vulnerabilities CSRF - XSS Date : 22-03-2012 Author : Ivano Binetti...

PT-2012-3636

Name of the Vulnerable Software and Affected Versions Wolf CMS versions 0.75 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the username, useremail, or userusername parameters in the wolfcms/admin/user/add endpoint. Recommendations For version...

CVE-2012-1898: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 useremail, or 3 userusername parameters...

Wolfcms <= 0.75 Persistent XSS [2]

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 new Persistent XSS Date : 26-03-2012 Author : Ivano Binetti...

Wolfcms 0.75 Cross Site Request Forgery / Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 Multiple Vulnerabilities CSRF - XSS Date : 22-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Wolfcms 0.75 - Cross-Site Request Forgery Cross-Site Scripting

Wolfcms 0.75 - Cross-Site Request Forgery Cross-Site Scripting +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 Multiple Vulnerabilities CSRF - XSS Date : 22-03-2012 Author : Ivano...

Wolfcms 0.75 - Cross-Site Request Forgery / Cross-Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 Multiple Vulnerabilities CSRF - XSS Date : 22-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Wolfcms <= 0.75 CSRF / XSS Vulnerabilities

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms = 0.75 Multiple Vulnerabilities CSRF - XSS Date : 22-03-2012 Author : Ivano Binetti...