Front Accounting 2.3.4 CSRF Vulnerability

No description provided by source. Software................Front Accounting 2.3.4 Vulnerability...........Cross-site Request Forgery Threat Level............Low 1/5 Download................http://frontaccounting.com/wb3/ Discovery Date..........4/27/2011 Tested On...............Windows Vista +...

Andy's PHP Knowledgebase Project 0.95.4 - SQL Injection

No description provided by source. ------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.aphpkb.org/...

Wordpress Plugin Custom Pages 0.5.0.1 - LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................WordPress WP Custom Pages 0.5.0.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

Jcow 4.2.1 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Jcow 4.2.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.jcow.net/ Discovery...

nuBuilder 10.04.20 Local File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................nuBuilder 10.04.20 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/nubuilder/files/ Release...

XAMPP 1.6.8 - (CSRF) Change Administrative Password Exploit

No description provided by source. XAMPP change administrative password: -------------------------------------------------------------------------------- Written by Michael Brooks special thanks to str0ke Affects XAMPP 1.6.8. homepage: http://www.apachefriends.org/ XAMPP has 17+ million downloads...

Vanilla Forum 2.0.17.9 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/...

XAMPP跨站脚本和跨站请求伪造漏洞

Bugtraq ID:66680 XAMPP（Apache+MySQL+PHP+PERL）是一个建 XAMPP 软件站集成软件包。 XAMPP存在跨站脚本和跨站请求伪造漏洞，允许攻击者利用漏洞获取敏感信息，劫持用户会话或允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 XAMPP & phpMyAdmin = 4.1.6 目前没有详细解决方案： http://www.apachefriends.org/en...

Quick.CMS 5.4 - Multiple Vulnerabilities

Exploit Title: QuickCms 5.4 Multiple Vulnerabilites Date: 04/08/2014 Author: shpendk Software Link: http://opensolution.org/download,en,18.html?sFile=Quick.Cms/Quick.Cmsv5.4.zip Version: 5.4 Tested on: Xampp on Windows Reflected XSS Vulnerability in Admin Area: Trigger:...

XAMPP 3.2.1 & phpMyAdmin 4.1.6 - Multiple Vulnerabilities (XSS & CSRF)

phpMyAdmin version 4.1.6 with XAMPP version 3.2.1 installed suffers from cross site request forgery and cross site scripting vulnerabilities. Title: XAMPP 3.2.1 & phpMyAdmin 4.1.6 "' in the url resulting in a reflected cross site scripting attack. The file...

XAMPP 3.2.1 phpMyAdmin 4.1.6 - Multiple Vulnerabilities

XAMPP 3.2.1 phpMyAdmin 4.1.6 - Multiple Vulnerabilities Title: XAMPP 3.2.1 & phpMyAdmin 4.1.6 = multiple vulnerabilities Date: 6/04/2014 Author: hackerDesk Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 3.2.1 & 4.1.6 Tested on: Windows 7 CVE : kuDos tO: Mayank...

XAMPP 3.2.1 & phpMyAdmin 4.1.6 - Multiple Vulnerabilities

Title: XAMPP 3.2.1 & phpMyAdmin 4.1.6 = multiple vulnerabilities Date: 6/04/2014 Author: hackerDesk Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 3.2.1 & 4.1.6 Tested on: Windows 7 CVE : kuDos tO: Mayank Kapoor@wHys0SerI0s Sujoy Chakravarti@sujoy3188, Gurjant Singh...

XAMPP 3.2.1 / phpMyAdmin 4.1.6 XSS / CSRF

Title: XAMPP 3.2.1 & phpMyAdmin 4.1.6 = multiple vulnerabilities Date: 6/04/2014 Author: Software Link: http://www.apachefriends.org/en/xampp-windows.html Version: 3.2.1 & 4.1.6 Tested on: Windows 7 CVE : ██░ ██ ▄▄▄ ▄████▄ ██ ▄█▀▓█████ ██▀███ ▓█████▄ ▓█████ ██████ ██ ▄█▀ ▓██░ ██▒▒████▄ ▒██▀ ▀█...

[bWAPP] an extremely buggy web application!

bWAPP, or a buggy web application, is a deliberately insecure web application. bWAPP helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities. bWAPP prepares to conduct successful penetration testing and ethical hacking projects. What makes bWAPP so uniqu...

XAMPP Control Panel XSS Vulnerability (Jan 2014) - Active Check

XAMPP is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apachefriends:xampp";...

XAMPP 3.2.1跨站脚本漏洞

No description provided by source. Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian...

XAMPP 3.2.1 Cross Site Scripting

Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security Indonesian Hacker |...

XAMPP 3.2.1 Cross Site Scripting Vulnerability

Exploit for multiple platform in category local exploits Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo...

Cythosia Botnet SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Cythosia Botnet SQL-Injection Vulnerability Date: 24.11.2013 Exploit Author: GalaxyAndroid Vendor Homepage: unkn0wn Application Screenshots http://www.xylibox.com/2012/08/cythosia-botnet-vnloader.html Software Link:...

Cythosia 2.x Botnet (C2 Web Panel) - SQL Injection

Cythosia 2.x Botnet C2 Web Panel - SQL Injection Exploit Title: Cythosia Botnet SQL-Injection Vulnerability Date: 11.12.2013 Exploit Author: GalaxyAndroid Vendor Homepage: unkn0wn Application Screenshots http://www.xylibox.com/2012/08/cythosia-botnet-vnloader.html Version: 2.x Tested on: Windows ...