osCommerce 2.2 admin/products_attributes.php page Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the...

BPGames 1.0 - Blind SQL Injection

No description provided by source. x===================================================================x | AntiSecuritydotorg | x===================================================================x | Title : BPGames 1.0 blind SQL Injection Exploit | | Software : BPGames | | Vendor :...

DMXready Polling Booth Manager SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXready Polling Booth Manager SQLi Vulnerability Vendor url:http://www.dmxready.com Version:1 Price:79$ Published: 2010-09-6 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic...

Inmostore 4.0 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24884/info Inmostore is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

EquiPCS SQL Injection vulnerability exploit

No description provided by source. ============================================================ Title: EquiPCS=SQL onjection vulnerability Date:9/6/11 Author: Sideswipe Home: www.pro2leet.net or www.alboraaq.com or www.indishell.in Category: Web apps Dork: intext:Powered by EquiPCS Tested On : Xp...

ifnuke - Multiple Vulnerabilities (0day)

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : IfNuke Multiple Remote Vulnerabilities Affected Version : IfNuke 4.0.0 Discovery : www.abysssec.com...

Mambo Colophon Component <= 1.2 - Remote Inclusion Vulnerability

No description provided by source. Command Mambo Colophon =1.2 by Drago84 Found By Drago84 Exclusive Security Italian Security This bug allows a remote atacker to execute commands via rfi page: admin.colophon.php bug:...

Wordpress WP-SendSMS Plugin 1.0 - Multiple Vulnerabilities

No description provided by source. ============================================================= \ \ / / | | / \ / | | \ \ V / | | | | | | | | | / \ | ' \ | | | | | | | | | | | | '| | / / . \ | | | | | | || | | | | | | | | | // \ | ./ || / || || |/ || | | || blackpentesters.blogspot.com...

CactuShop 6.0 - Database Disclosure Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== Note : Forever...

Widget Corp CMS SQL Injection

Sql Injection on Widget Corp CMS + Date: 14/06/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.standardwidget.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable Files: index.php + Dork : intitle:"Widget...

CMS HINTWEB Cross Site Scripting / SQL Injection

Cross Site Scripting on CMS HINTWEB + Date: 04/05/2014 + Risk: LOW + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.hintweb.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: index.php + Exploit : http://host//index.php?txtMSG=XSS + PoC...

Digital Access Pass Cross Site Scripting

Cross Site Scripting on Digital Acess Pass + Date: 04/05/2014 + Risk: LOW + Author: Felipe Andrian Peixoto + Vendor Homepage: http://digitalaccesspass.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: login.php + Exploit :...

CMS Softgov Cross Site Scripting

Cross Site Scripting on CMS SOFTGOV + Date: 23/04/2014 + Risk: LOW + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.softgov.com.br/sg/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: email.php + Exploit :...

CGR BRASIL CMS SQL Injection

Multiple Sql Injection on CGR BRASIL CMS + Date: 21/04/2014 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.cgrbrasil.com.br + Contact: [email protected] + Tested on: Windows 7 and Linux + Exploit : http://host/print.php?id=SQL Injection + Exploit2 :...

CVE-2013-3252

Cross-site request forgery CSRF vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

CVE-2013-3252

Cross-site request forgery CSRF vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

PT-2014-2665

Name of the Vulnerable Software and Affected Versions WP-PostViews plugin versions prior to 1.63 Description A cross-site request forgery CSRF issue exists in the options admin page of the WP-PostViews plugin, allowing remote attackers to hijack the authentication of administrators for requests...

CVE-2013-3252: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the options admin page in the WP-PostViews plugin before 1.63 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors...

Canon PIXMA MX722 Printer Wireless Password Disclosure

Affects: Canon PIXMA MX722 Printer and probably other Canon printers. After typing my WPA2 WiFi password into the printer through the built-in hardware keypad, it exposes the cleartext password to the LAN through an admin page that isn't password protected:...

PT-2014-2384

Name of the Vulnerable Software and Affected Versions Open Solution Quick.Cms version 5.0 Open Solution Quick.Cart version 6.0 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "admin.php". This could potentially lead ...