1934 matches found
NibbleBlog 4.0.3 Shell Upload
NibbleBlog 4.0.3: Code Execution Security Advisory – Curesec Research Team 1. Introduction Affected Product: NibbleBlog 4.0.3 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: Website: http://www.nibbleblog.com/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to...
Serendipity 2.0.1 Blind SQL Injection
Serendipity 2.0.1: Blind SQL Injection Security Advisory – Curesec Research Team 1. Introduction Affected Product: Serendipity 2.0.1 Fixed in: 2.0.2 Fixed Version Link: https://github.com/s9y/Serendipity/releases/download/2.0.2/serendipity-2.0.2.zip Vendor Contact: [email protected]...
CVE-2015-6528
Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...
Bolt 2.2.4 Shell Upload Vulnerability
Bolt version 2.2.4 suffers from a code execution vulnerability via shell upload. Bolt 2.2.4: Code Execution Security Advisory – Curesec Research Team 1. Introduction Affected Product: Bolt 2.2.4 Fixed in: 2.2.5 Fixed Version Link: http://bolt.cm/distribution/archive/bolt-2.2.5.zip Vendor Contact:...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername or 2 adminpassword parameter to install.php...
SilverStripe CMS Unvalidated Redirect & XSS vulnerabilities
Credits: hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-SILVERSTRIPE0607.txt Vendor: ================================ http://www.silverstripe.org/software/download Product: ================================ SilverStripe CMS & Framework v3.1.13...
WordPress Encrypted Contact Form plugin cross-site request forgery vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Encrypted Contact Form plugin is a WordPress plugin that uses end-to-end encryption to send user information. A...
[CVE-2015-2926] XSS vuln in phpTrafficA
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Product: phpTrafficA Product page: http://soft.zoneo.net/phpTrafficA/ Affected versions: Up to and including 2.3 latest as of writing. Description: The user agent string provided by the browser is not sanitized nor escaped when handled. This string ...
Traidnt Up 3.0 - SQL Injection
Traidnt Up 3.0 - SQL Injection Exploit Title: Traidnt Up v3.0 SQL Injection Google Dork: "Powered by TRAIDNT UP Version 3.0" Date: 10-04-2015 Exploit Author: Ali Sami [email protected] Vendor Homepage: http://traidnt.net Software Link:...
phpTrafficA 2.3 Cross Site Scripting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Product: phpTrafficA Product page: http://soft.zoneo.net/phpTrafficA/ Affected versions: Up to and including 2.3 latest as of writing. Description: The user agent string provided by the browser is not sanitized nor escaped when handled. This string ...
WordPress Admin Shell Upload
This module will generate a plugin, pack the payload into it and upload it to a server running WordPress provided valid admin credentials are used. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/zip' cla...
MS15-015: Vulnerability in Microsoft Windows could allow elevation of privilege: February 10, 2015
None None...
Multiple SQL Injection Vulnerabilities in EcommerceMajor
ecommerceMajor is a PHP-based content management system CMS for building e-commerce portals developed by software developer Bhaskar. EcommerceMajor has multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the productbycat parameter product.php o...
Skeleton Key Malware Bypasses Active Directory Authentication
Enterprise Active Directory administrators need to be on the lookout for anomalous privileged user activity after the discovery of malware capable of bypassing single-factor authentication on AD that was used as part of a larger cyberespionage campaign against a global company based in London...
poMMo Aardvark Cross-Site Request Forgery Vulnerability
poMMo Aardvark is a PHP-based mass mailing software. A cross-site request forgery vulnerability exists in poMMo Aardvark PR16.1, which allows remote attackers to hijack administrative authentication by hijacking request authentication of administrars modifying credentials via certain admin...
PHPAPP注入第真十二枚（无视过滤）
简要描述： PHPAPP注入第真十二枚（无视过滤） 详细说明： 在wooyun上看到了有人提了PHPAPP的漏洞： http://wooyun.org/bugs/wooyun-2010-055604，然后去官网看了看，前几天刚有更新，就在官网下了PHPAPP最新的v2.6来看看2014-12-11更新的。 PSOT注入点：wwww.xxx.com/index.php?action=8&app=80, 存在漏洞的文件在/phpapp/apps/taskcount/mainphpapp.php 下面分析一下漏洞产生的原因 第一处绕过：...
DayuCMS 1.525 /member/include/tag.class.php SQL注入漏洞
/member/include/member.class.phpfunction exists$field, $value return $this-db-fetchone"SELECT id FROM $this-table WHERE $this-table.$field='$value' LIMIT 0, 1"; 传入的$field和$value未经过过滤直接带入SQL语句中。 /member/include/msg.class.php function send$msgs global $userid,$username,$member;...
Qibo Menhu V5 /wei/js.php SQL注入漏洞
/wei/js.php elseif$type=='like' $SQL.=" AND id!='$id' "; if!$keyword extract$db-getone"SELECT keywords AS keyword FROM $precontent WHERE id='$id'"; if$keyword $SQL.=" AND "; $keyword=urldecode$keyword; $detail=explode" ",$keyword; unset$detail2; foreach $detail AS $key=$value $detail2=" BINARY...
