Frog CMS 0.9.5 Open Redirect

Exploit Title: FrogCMS Open Redirect Vulnerability + Google Dork: N/A + Date: 10/8/2015 + Exploit Author: Arash Khazaei + Vendor Homepage: http://www.madebyfrog.com/ + Software Link: http://www.madebyfrog.com/download.html + Version: 0.9.5Last Version + Tested on: Kali / Mozilla FireFox, Windows...

Supercon Infoservices Bypass Admin Page Vulnerability

Exploit for php platform in category web applications +++++++++++++++ + + Exploit Title : Supercon Infoservices Bypass Admin Page Vulnerability + + Exploit Author : Ashiyane Digital Security Team + + Vendor Homepage : http://www.superconinfo.com/ + + Google Dork : intext:"Developed By:Supercon...

Wolf CMS 0.8.2 Open Redirect

Exploit Title: Wolf CMS Open Redirect Vulnerability + Google Dork: N/A + Date: 10/8/2015 + Exploit Author: Arash Khazaei + Vendor Homepage: https://www.wolfcms.org/ + Software Link: https://bitbucket.org/wolfcms/wolf-cms-downloads/downloads/wolfcms-0.8.2.zip + Version: 0.8.2Last Version + Tested...

Job Manager <= 0.7.22 - Unauthenticated Stored Cross-Site Scripting (XSS)

The Job Manager WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting XSS security vulnerability. Go to the job listings page /index.php/jobs/apply/, then click on "send through your résumé", add the payload '" to the email field. The JavaScript will be executed on the...

BDINFOBIZ LIMITED Bypass Admin Page Vulnerability

Exploit for php platform in category web applications +++++++++++++++ + Exploit Title : BDINFOBIZ LIMITED Bypass Admin Page Vulnerability + Exploit Author : Ashiyane Digital Security Team + Vendor Homepage : http://www.bdinfobiz.com/ + Date: 2015-07-29 + Google Dork : intext:"Developed by BDINFOB...

WordPress Advertisement Management 1.0 Cross Site Scripting

Title: WordPress 'Advertisement Management' Plugin Version: 1.0 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: - https://wordpress.org/plugins/advertisement-management/ - https://plugins.svn.wordpress.org/advertisement-management/ Notified WordPress: 2015-06-21...

WordPress Copy Or Move Comments 1.0.0 Cross Site Scripting

Title: WordPress 'Copy or Move Comments' Plugin Version: 1.0.0 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: - https://wordpress.org/plugins/copy-or-move-comments/ - https://plugins.svn.wordpress.org/copy-or-move-comments/ Notified WordPress: 2015-06-21...

Seawind Solution Bypass Admin Page Vulnerability

Exploit for php platform in category web applications Exploit Title : Seawind Solution Bypass Admin Page Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://india.seawindsolution.com/ Google Dork : intext:"Design & Developed By Seawind Solution Pvt.Ltd." Date:...

Welcart vulnerable to cross-site scripting

Overview Welcart provided by Collne Inc. is a WordPress plugin for creating shopping websites. Welcart contains a cross-site scripting CWE-79 vulnerability due to the processing of uscesreferer parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the...

WordPress Plugin Paid Memberships Pro Has Multiple Cross-Site Scripting Vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. Multiple cross-site scripting vulnerabilities exist in the WordPress plugin Paid Memberships Pro. The vulnerability is caused by passin...

WordPress Plugin WP E-Commerce Shop Styling 2.5 - Arbitrary File Download

Title: Remote file download vulnerability in wordpress plugin wp-ecommerce-shop-styling v2.5 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-05 Download Site: https://wordpress.org/plugins/wp-ecommerce-shop-styling Vendor: https://profiles.wordpress.org/haet/ Vendor Notified: 2015-07-05, fixed...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in GetSimple CMS before 3.3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 post-content or 2 post-title parameter to admin/edit.php...

WordPress Copy Or Move Comments Plugin <= 1.0.0 - Cross Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because "POST" parameters are printed unsanitized on the plugins admin page. Solution Update the plugin...

WordPress Copy Or Move Comments Plugin <= 1.0.0 - Cross Site Scripting (XSS)

This plugin is prone to a cross site scripting vulnerability, because "POST" parameters are printed unsanitized on the plugins admin page. Solution Update the plugin...

Drupal Petition module cross-site scripting vulnerability (CNVD-2015-03892)

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Petitions is one of the petition modules used in the U.S. White House website. A cross-site scripting vulnerability exists in the administration page of the Drupal Petitions module. A...

Sql injection

SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the linkids parameter in an Update action in the syndication.php page to wp-admin/admin.php...

DokuWiki persistent Cross Site Scripting

Advisory ID: SGMA15-001 Title: DokuWiki persistent Cross Site Scripting Product: DokuWiki Version: 2014-09-29c and probably prior Vendor: www.dokuwiki.org Vulnerability type: Persistent XSS Risk level: Medium Credit: Filippo Cavallarin - segment.technology CVE: N/A Vendor notification: 2015-03-18...

WordPress plugin Embed-Articles/wp-admin/admin.php cross-site request forgery vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress plugin Embed-Articles/wp-admin/admin.php, which allows a...

CSRF/XSSIn Ad_InSerter Wordpress

================================================================ CSRF/Stored XSS Vulnerability in Ad Inserter Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ad Inserter Wordpress...

WordPress Embed Articles Plugin <= 7.0.3 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Attackers can insert arbitrary script into admin page, hijack admin's cookies etc. Solution This plugin is closed...