Zomplog 3.9 XSS exploit-vulnerability warning-the black bar safety net

漏洞 文件 index.php Vulnerability code: 1 0: // some general xxs protection 1 1: $GET’search’ = strreplace’script’, ’, $GET’search’; 1 2: $GET’username’ = strreplace’script’, ’, $GET’username’; Code just remove the script file keyword, the page is vulnerable toXSSattack POC...

Zomplog 3.9 XSS Vulnerability

Exploit for php platform in category web applications ============================= Zomplog 3.9 XSS Vulnerability ============================= Title: Zomplog 3.9 XSS Vendor: http://www.zomp.nl Dork: "Powered by Zomplog" AUTHOR: ITSecTeam Email: email protected Website: http://www.itsecteam.com...

zomplog39-xss.txt

Greetings to --d3hydr8 -r45c4l -baltazar -sinner01 -C1c4Tr1Z - Gabitzu and all darkc0de members ; Author: swappie aka faithlove Email : [email protected] Do researching and share! ; Title: ZompLog 3.9 beta CMS Link: http://www.zomp.nl/user-content/downloads/zomplog/zomplog3.9-beta.zip...

Design/Logic Flaw

Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1...

CVE-2008-2349

Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1...

CVE-2008-2349

Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1...

CVE-2008-2349

CVE-2008-2349 affects Zomplog,

CVE-2008-2349: Undefined Security Weakness

Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1...

zomplog-admin.txt

======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm password" -------------------------------------------------------------...

zomplog-disclose.txt

Name: "Zomplog 3.8.2 = file disclouse" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: Stack-Terrorist Exploit: http://localhost/path/upload/forcedownload.php?file=forcedownload.php thnx : alah...

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

No description provided by source. ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 = add admin" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: ArxWolf Discovered On: 16 05 2008 WWW: http://WebXakep.net ICQ...

Zomplog <= 3.8.2 (force_download.php) File Disclosure Vulnerability

No description provided by source. Name: "Zomplog 3.8.2 = file disclouse" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: Stack-Terrorist Exploit: http://localhost/path/upload/forcedownload.php?file=forcedownload.php thnx : alah...

Zomplog 3.8.2 - 'force_download.php' File Disclosure

Name: "Zomplog 3.8.2 = file disclouse" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: Stack-Terrorist Exploit: http://localhost/path/upload/forcedownload.php?file=forcedownload.php thnx : alah milw0rm.com 2008-05-16...

Zomplog 3.8.2 - 'newuser.php' Arbitrary Add Admin

======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm password"...

Zomplog <= 3.8.2 (force_download.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== Zomplog = 3.8.2 forcedownload.php File Disclosure Vulnerability =================================================================== Name: "Zomplog 3.8.2 = file disclouse"...

Zomplog <= 3.8.2 (newuser.php) Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ========================================================== Zomplog Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль "Confirm...

Zomplog 3.8.2 - newuser.php Arbitrary Add Admin

Zomplog 3.8.2 - newuser.php Arbitrary Add Admin ======================== WEBXAKEP.NET =========================== Name: "Zomplog 3.8.2 Добавляем админа "Add Admin" /-- Титлы блога "Blog Title" Логин "Username" Пароль "Password" Повторяем пароль...

Zomplog 3.8.2 - force_download.php File Disclosure

Zomplog 3.8.2 - forcedownload.php File Disclosure Name: "Zomplog 3.8.2 = file disclouse" Version: All Script Download: http://www.zomp.nl/zomplog/ DORK: "powered by zomplog" Discovered By: Stack-Terrorist Exploit: http://localhost/path/upload/forcedownload.php?file=forcedownload.php thnx : alah...

CVE-2008-2176

Cross-site scripting XSS vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter...