CVE-2012-3953

SQL injection vulnerability in admin/index.php in phpList before 2.10.19 allows remote administrators to execute arbitrary SQL commands via the delete parameter to the editattributes page...

YourArcadeScript 2.4beta default admin Vulnerablity

Exploit for php platform in category web applications Exploit Title: YourArcadeScript 2.4beta default admin Vulnerablity author : gilang vendor : www.yourarcadescript.com risk : high type : webapps / 0day php Date: 07-11-2012 Version:2.4beta google dork : YourArcadeScript 2.4beta Contact:...

GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites

Title: ====== GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites Date: ===== 2012-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=601 VL-ID: ===== 601 Common Vulnerability Scoring System: ==================================== 7.5 Introduction: =============...

CVE-2012-3833

Cross-site scripting XSS vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter...

CVE-2012-3833

CVE-2012-3833 is a Cross-site Scripting (XSS) vulnerability in the default index page under admin/ in Quick.CMS 4.0. The issue enables remote attackers to inject arbitrary web script or HTML via the p parameter in requests. The affected component is the default admin index page; root cause is an ...

CVE-2012-3833

Cross-site scripting XSS vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter...

GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilities

Document Title: =============== GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=601 Release Date: ============= 2012-06-10 Vulnerability Laboratory ID VL-ID: ==================================== 6...

CVE-2012-2912

Multiple cross-site scripting XSS vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter in the show-league page or 2 season parameter in the team page to wp-admin/admin.php...

CVE-2012-2917

Cross-site scripting XSS vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key cnd-key in a share-and-follow-menu page to wp-admin/admin.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter in the show-league page or 2 season parameter in the team page to wp-admin/admin.php...

WordPress GRAND Flash Album Gallery Plugin 1.71 - Cross Site Scripting

WordPress GRAND Flash Album Gallery plugin's "admin.php" is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

GetSimple CMS 3.1 admin/index.php Multiple Parameter Reflected XSS

GetSimple CMS 3.1 admin/index.php Multiple Parameter Reflected XSS. CVE-2012-6621. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53501/info GetSimple CMS is prone to HTML-injection and cross-site scripting vulnerabilities because it fails to properly sanitize...

Multiicon Software Web Media Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================================================== Multiicon Software Web Media Sql injection Vulnerability By Sideswipe ============================================================================== + Exploit Title...

Gold Coast Web Design SQL Injection

Exploit Title : Gold Coast Web Design Sql Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : http://goldcoastwebdesign.com Contact : [email protected] , [email protected] Security Risk : High Dork ...

admin/fixcwdmemberships.jsp lacks an XSRF token to run the repair action.

admin/fixcwdmemberships.jsp does not require a csrf token to run the repair action. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

CVE-2012-1670

admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action...

Disable browser password save on Admin page in Firefox

In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I get prompted to save the password. We are only concerned about this for the Admin page password prompt specifically...

Disable browser password save on Admin page in Firefox

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-25008. panel In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I get...

Disable browser password save on Admin page in Firefox

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-25008. panel In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I ge...

CnnCMS 1.x SQL Injection Vulnerability

Exploit for php platform in category web applications :-------------------------------------------------------------------------------------------------------------------------: : Exploit Title : CnnCMS 1.x SQL Injection Vulnerability : Date : March 3rd 2012 : Author : X-Cisadane : Software Link ...