Damn Vulnerable Web Application: DVWA

Damn Vulnerable Web Application DVWA is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid...

Monsta FTP 1.6.2 - Multiple Vulnerabilities

Monsta FTP 1.6.2 - Multiple Vulnerabilities Exploit Title: CSRF XSS Monsta FTP Google Dork: intitle: Monsta FTP CSRF / XSS Date: 2015-09-11 Exploit Author: hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.monstaftp.com Software Link: www.monstaftp.com Version: monstaftpv1.6.2 Test...

PHPfileNavigator 2.3.3 - Cross-Site Scripting

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILENAVIGATOR0812c.txt Vendor: ================================ pfn.sourceforge.net Product: =================================== PHPfileNavigator v2.3.3 pfn Is...

PHPfileNavigator 2.3.3 Privilege Escalation

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILENAVIGATOR0812b.txt Vendor: ========================= pfn.sourceforge.net Product: ===================================================== PHPfileNavigator v2.3.3 pfn...

Damn Vulnerable Web App - PHP/MySQL Training Web Application that is Damn Vulnerable

Damn Vulnerable Web App DVWA is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid...

Chronosite 5.12 - SQL Injection

Chronosite 5.12 - SQL Injection Exploit Title: Chronosite 5.12 SQL Injection Google Dork: filetype:php inurl:"/archives.php" intext:"ARCHIVES Chrono-site" Date: 13/05/15 Exploit Author: Wad Deek Vendor Homepage: http://www.chronosite.org/ Software Link:...

Chronosite 5.12 - SQL Injection

Exploit Title: Chronosite 5.12 SQL Injection Google Dork: filetype:php inurl:"/archives.php" intext:"ARCHIVES Chrono-site" Date: 13/05/15 Exploit Author: Wad Deek Vendor Homepage: http://www.chronosite.org/ Software Link: http://www.chronosite.org/chronoupload/chronosite512.zip Version: 5.12 Test...

Pluck 4.7 - Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: Pluck 4.7 Directory Traversal Google Dork: filetype:php inurl:"/data/modules/albums/albumsgetimage.php?image=" Date: 08/05/15 Exploit Author: Wadeek Vendor Homepage: http://www.pluck-cms.org/?file=home Software Link:...

PHPCollab 2.5 - deletetopics.php SQL Injection

PHPCollab 2.5 - deletetopics.php SQL Injection Exploit Title: PHPCollab 2.5 - SQL Injection Google Dork: filetype:php inurl:"/general/login.php?PHPSESSID=" Date: 13/05/2015 Exploit Author: Wad Deek Vendor Homepage: http://www.phpcollab.com/ Software Link:...

PHPCollab 2.5 - 'deletetopics.php' SQL Injection

Exploit Title: PHPCollab 2.5 - SQL Injection Google Dork: filetype:php inurl:"/general/login.php?PHPSESSID=" Date: 13/05/2015 Exploit Author: Wad Deek Vendor Homepage: http://www.phpcollab.com/ Software Link: http://sourceforge.net/projects/phpcollab/files/final/2.5/ Version: 2.5 +2.5...

Pluck CMS 4.7 - Directory Traversal

Pluck CMS 4.7 - Directory Traversal Exploit Title: Pluck 4.7 Directory Traversal Google Dork: filetype:php inurl:"/data/modules/albums/albumsgetimage.php?image=" Date: 08/05/15 Exploit Author: Wadeek Vendor Homepage: http://www.pluck-cms.org/?file=home Software Link:...

Pluck CMS 4.7 - Directory Traversal

Exploit Title: Pluck 4.7 Directory Traversal Google Dork: filetype:php inurl:"/data/modules/albums/albumsgetimage.php?image=" Date: 08/05/15 Exploit Author: Wadeek Vendor Homepage: http://www.pluck-cms.org/?file=home Software Link: http://www.opensourcecms.com/scripts/redirect/download.php?id=167...

XAMPP < 1.8.2 Local Write Access Vulnerability (Oct 2014) - Active Check

XAMPP is prone to an arbitrary file download vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apachefriends:xampp";...

XAMPP 1.8.x Multiple Vulnerabilities

Exploit for multiple platform in category remote exploits Exploit Name : XAMPP 1.8.x Multiple Vulnerabilities Author : DevilScreaM Date : 6 October 2014 Vendor : http://bitnami.com Version : 1.8.x or Higher Version Operating System : Windows / Linux Vulnerability : Cross Site Scripting / Write Fi...

CVE-2013-2586

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting XSS attacks via the WriteIntoLocalDisk method...

Cross site scripting

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting XSS attacks via the WriteIntoLocalDisk method...

CVE-2013-2586

CVE-2013-2586 affects XAMPP 1.8.1. The /xampp/lang.php page fails to restrict access, letting an unauthenticated user write to lang.tmp on local disk and trigger XSS via WriteIntoLocalDisk. Multiple sources (NVD/OpenVAS/Exploit-DB/Seebug) corroborate remote write access and local file modificatio...

CVE-2013-2586

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting XSS attacks via the WriteIntoLocalDisk method...

CVE-2013-2586: Improper Neutralization of Input During Web Page Generation

XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting XSS attacks via the WriteIntoLocalDisk method...

PT-2014-2595

Name of the Vulnerable Software and Affected Versions XAMPP version 1.8.1 Description The issue allows remote attackers to execute cross-site scripting XSS attacks by modifying xampp/lang.tmp via the WriteIntoLocalDisk method due to improper access restriction to xampp/lang.php. Recommendations F...