Dedecms presence of a stored cross site scripting vulnerability

Vulnerability description: Dedecms is an open source PHP open source website management system. Dedecms member function carbuyaction. php in the address, des, email, postname parameters there is stored XSS vulnerability, the attacker may exploit the vulnerability to obtain the administrator cooki...

WordPress Gwolle Guestbook 1.7.4 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Gwolle Guestbook WordPress Plugin ------------------------------------------------------------------------ Radjnies Bhansingh, July 2016...

TendaDlinkTplink TD-W8961ND - DHCP Cross-Site Scripting

TendaDlinkTplink TD-W8961ND - DHCP Cross-Site Scripting Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 Release Date: ============= 2016-11-28 Vulnerability...

Alienvault OSSIM/USM 5.3.1 Cross Site Scripting

Details ======= Product: Alienvault OSSIM/USM Vulnerability: Reflected XSS Author: Peter Lapp, lappsec gmail com CVE: CVE-2016-8583 Vulnerable Versions: body+onpageshow%3d"alert0 For the targets param the payload is slightly different. Timeline ======== 08/03/16 - Reported to Vendor 10/03/16 -...

Zenbership 107 Cross Site Request Forgery / Cross Site Scripting

ADVISORY INFORMATION ======================================== Title: Zenbership latest version - Multiple Vulnerabilities Application: Zenbership Class: Sensitive Information disclosure Versions Affected: alert'ExploitDB' HTTP Request POST /zenbership/pp-functions/formprocess.php HTTP/1.1 Host:...

YouTube Automated CMS 1.0.7 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

Exploit Title: YouTube Automated CMS 1.0.1 / 1.0.7 - CSRF to Persistent XSS Date: 14 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link: https://codecanyon.net/item/youtube-automated-cms/12021939 Version: 1.0.1 to 1.0.7...

Colorful Blog - Persistent Cross-Site Scripting

Colorful Blog - Persistent Cross-Site Scripting Exploit Title : ----------- : Colorful Blog - Stored Cross Site Scripting Author : ----------------- : Besim Google Dork : --------- : - Date : -------------------- : 13/10/2016 Type : -------------------- : webapps Platform : --------------- : PHP...

ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting

Exploit for php platform in category web applications Exploit Title : ApPHP MicroBlog 1.0.2 - Stored Cross Site Scripting Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162 Descriptio...

ApPHP MicroCMS 3.9.5 - Persistent Cross-Site Scripting

ApPHP MicroCMS 3.9.5 - Persistent Cross-Site Scripting Exploit Title :----------------- : ApPHP MicroCMS 3.9.5 - Stored Cross Site Scripting Author :------------------------ : Besim Google Dork :---------------- : - Date :-------------------------- : 12/10/2016 Type :-------------------------- :...

AjaxExplorer 1.10.3.2 - Multiple Vulnerabilities

Exploit for php platform in category web applications + Credits: hyp3rlinx + ISR: apparitionsec Vendor: ========== sourceforge.net smsid download linx: sourceforge.net/projects/ajax-explorer/files/ Product: ======================= AjaxExplorer v1.10.3.2 Manage server files through simple windows...

Liferay Portal 5.1.2 - Persistent Cross-Site Scripting

Exploit Title: Liferay Portal 5.1.2 - Persistent XSS Discovery Date: 2016-02-10 Exploit Author: Sarim Kiani Vendor Homepage: https://www.liferay.com Software Link: https://www.liferay.com/community/releases Version: 5.1.2 Tested on: Windows OS Liferay Portal 5.1.2 is an open source version of...

ZenPhoto 1.4.8 - Multiple Vulnerabilities

ZenPhoto version 1.4.8 suffers from cross site scripting, remote SQL injection, and path traversal vulnerabilities. Vulnerability: SQL Injection, Reflected XSS, Path Traversal Affected Software: ZenPhoto http://www.zenphoto.org/ Affected Version: 1.4.8 probably also prior versions Patched Version...

Discuz!X2.0,X2.5,X3.0,X3.1,X3.2版本的插件存储型XSS漏洞

简要描述： Discuz!X2.0,X2.5,X3.0,X3.1,X3.2版本的存储型XSS漏洞 详细说明： 先看看这个图。。信息量好强大 所有安装都是默认的。 然后在前台点击购买广告位 文字内容插入以下XSS payload看看 " 但是我抓包直接fuzz的时候。。。 看见了iframe标签没有过滤，那么在后台看了下广告记录 漏洞证明：...

gpEasy CMS 4.4 Cross Site Scripting

Affected software: gpeasy cms Type of vulnerability:stored xss URL:gpeasy.com Discovered by: provensec Website: provensec.com version: gpEasy 4.4 Proof of concept goto edit layout and fill filed with xss payload " and save it javascript will execute --20cf303f64d02dcd89051578f782 Content-Type:...

Concrete CMS: Stored XSS in testimonial Company

XSS payload can be executed and saved permanently in testimonial Company. Poc code: "...

Concrete CMS: Stored XSS in Testimonial Position

XSS payload can be executed and saved permanently in Testimonial Position. Poc code: "...

Concrete CMS: Stored XSS in Testimonial name

XSS payload can be executed and saved permanently in Testimonial name. Poc code: "...

Concrete CMS: Stored XSS in Feature tile

XSS payload can be executed and saved permanently in Feature tile . Poc code: "...

Concrete CMS: Stored XSS in title of date navigation

XSS payload can be executed and saved permanently in title of date navigation. Poc code: "...

Netcat CMS 5.5 Cross Site Scripting

Affected software: netcat cms Type of vulnerability: cross site scripting URL: netcat.ru Discovered by: Provensec Website: http://www.provensec.com version: 5.5 Proof of concept Adding a new group with xss payload will lead to xss http://site/netcat/admin/usergroup.list payload used "...