SEC Consult SA-20141029-0 :: Multiple critical vulnerabilities in Vizensoft Admin Panel

SEC Consult Vulnerability Lab Security Advisory 20141029-0 ======================================================================= title: Multiple critical vulnerabilities product: Vizensoft Admin Panel vulnerable version: 2014 fixed version: - impact: critical homepage: http://www.vizensoft.com...

Yourls 1.7 Cross Site Scripting

Hello, I found a xss stored vulnerability in Yourls 1.7 script latest version. The attacker can steal the admin's cookies and login in the admin panel. Note: Only the admin can see this. Steps to perform the vulnerability: 1. Create a new url to shorten -- In the inputs you need write this payloa...

NDBLOG 0.1 Cross Site Scripting / SQL Injection

NDBLOG version 0.1 multi Vulnerability ====================================== Author : indoushka Vondor : ALAMARAB2.com Dork : جميع الحقوق محفوظة © - ALAMARAB2.com - NDBLOG v0.1 ================================================== Sql injection : http://localhost/ND/blog.php?id=85 inject her Blind...

Phpok漏洞礼包组合可shell

简要描述： Phpok漏洞礼包，组合可shell 详细说明： 1.2处存储行xss 2.添加管理员帐号密码+利用点 3.后台写shell 1. 第一处 我们先来注册一个帐号。 其中帐号这内容为 a';document.write''// 注册好之后。 后台 需要点击才能激活xss 第二处 留言 留言主题...

Yahoo Quickly Fixes SQL Injection Vulnerability Escalated to Remote Code Execution

Yahoo! was recently impacted by a critical web application vulnerabilities which left website's database and server vulnerable to hackers. A cyber security expert and penetration tester, Ebrahim Hegazy a.k.a Zigoo from Egypt, has found a serious SQL injection vulnerability in Yahoo's website that...

Zen Cart 1.5.3 - Multiple Vulnerabilities

No description provided by source. Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

(Plone): Restricted Python injection

It was discovered that Plone, included as a part of luci, did not properly protect the administrator interface control panel. A remote attacker could use this flaw to inject a specially crafted Python statement or script into Plone's restricted Python sandbox that, when the administrator interfac...

TNG Sitebuilding v. 10.0.3 - Admin Panel Motion Logs Downloader Exploit

Admin adminlog.txt all his movements are recorded file. This log file is displayed in the target's local directory Database backup taken in this file where records are shown to be and you can easily download a database backup Usage Info perl www.target.com /path/ TNG Sitebuilding v. 10.0.3 - Admi...

Zen Cart 1.5.3 - Multiple Vulnerabilities

Zen Cart 1.5.3 - Multiple Vulnerabilities Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id...

Zen Cart 1.5.3 - Multiple Vulnerabilities

Title: Zen Cart 1.5.3 - CSRF & Admin Panel XSS Date: 09.07.14 Vendor: zen-cart.com Tested on: Apache 2.2 at Linux Contact: smashatdevilteam.pl 1 - CSRF - Delete admin GET profile stands for user id. localhost/zen/zen-cart-v1.5.3-07042014/admin123/profiles.php?action=delete&profile=2 - Reset layou...

ExpressionEngine: Stored Cross-Site Scripting Vulnerability in /admin.php?/cp/admin_system/general_configuration

Vulnerability: Stored XSS Persistent Severity: High Vulnerable Parameter: siteindex PoC: POST /exe/admin.php?/cp/adminsystem/generalconfiguration&S=98be920eacf52890b4b159431a7da8cf HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:31.0 Gecko/20100101 Firefox/31.0...

Crescendo - Sales CRM Authentication Bypass Vulnerability

Exploit for asp platform in category web applications Crescendo - Sales CRM Authentication Bypass Vulnerability Exploit Title: Crescendo - Sales CRM Authentication Bypass Vulnerability Sql Injection Google Dork: N/A Date: July 15 , 2014 Exploit Author: Monendra Sahu email protected Vendor Homepag...

Sql injection

SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL commands via the filter parameter...

CVE-2014-5090

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel...

Code injection

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel...

CVE-2014-5090

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel...

CVE-2014-5090

CVE-2014-5090 affects Status2k Server Monitoring Software. admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field of Add Logs in the Admin Panel. CVSSv2 base score is 6.5 (MEDIUM) with vector AV:N/...

Dlink DWR-113 Rev. Ax - CSRF Denial of Service

It was observed that the D-link DWR-113 wireless router is vulnerable to denial of service attack via CSRFCross-Site Request Forgery vulnerability. An attacker could craft a malicious CSRF exploit to change the password in the password functionality when the useradmin is logged in to the...

D-Link DWR-113 Cross Site Request Forgery

Exploit Title: Dlink DWR-113 Rev. Ax - CSRF causing Denial of Service Google dork : N/A Exploit Author: Blessen Thomas Date : 29/07/14 Vendor Homepage : http://www.dlink.com/ Software Link : N/A Firmware version: v2.02 2013-03-13 Tested on : Windows 7 CVE : CVE-2014-3136 Type of Application : Web...

OctavoCMS Admin Panel Cross Site Scripting

Title : OctavoCMS Admin Panel Cross Site Scripting Vendor : http://octavocms.com/ Date : 2014.07.10 ================================ Proof of concept : First You should Login As Admin ... 1 : http://TARGET/admin/media/add.php?action="alert/XSS/ 2 :...