Wordpress GigPress 2.1.10 Plugin Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: GigPress 2.1.10 wordpress plugin Stored XSS Date: 21-2-2011 Author: Saif El-Sherei Version: GigPress 2.1.10, WordPress 3.0.5 Tested on: FireFox 3.6.13, IE 8 Vendor Response: plugin Author released an update to fix this issue Inf...

Lifetype 1.2.10 HTTP Referer Cross Site Scripting

Exploit Title: lifetype 1.2.10 http referer XSSstored Date: 11-1-2010 Author: Saif El-Sherei Software Link: http://lifetype.net/page/downloads Version: 1.2.10 Tested on: firefox 3.0.15 failure to sanitize the http referer header in index.php results in a cross site scripting attack against admins...

Joomla Component com_isp persistent Xss Vulnerability

Exploit for php platform in category web applications =========================================== Joomla comisp persistent Xss Vulnerability =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1...

mojoportal - Multiple Vulnerabilities

mojoportal - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

CVE-2010-2843

Cisco Wireless LAN Controller (WLC) software is listed as affected (likely versions 4.2 through 6.0). The CVE describes a vulnerability where remote authenticated users can bypass access restrictions and modify configuration, and potentially obtain administrative privileges, via unspecified vecto...

eUploader PRO 3.1.1 - Cross-Site Request Forgery Cross-Site Scripting

eUploader PRO 3.1.1 - Cross-Site Request Forgery Cross-Site Scripting ----------------------------------------------------------------------------------------------- Title: eUploader PRO 3.1.1 XSRF/XSS Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 16...

Input validation

Cacti 0.8.7e and earlier allows remote authenticated administrators to gain privileges by modifying the "Data Input Method" for the "Linux - Get Memory Usage" setting to contain arbitrary commands...

CuteNews 1.4.6 - 'index.php' Cross-Site Request Forgery (New User Creation)

source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that exploits for some of the issues may...

CuteNews 1.4.6 - 'search.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note that exploits for some of the issues may...

FMyClone 2.3 Multiple SQL Injection Vulnerabilities

No description provided by source. FMyClone V2.3 Multiple SQLi By learn3r hacker from nepal [email protected] Product name: FMyClone Version: 2.3 or maybe lower Home: fmyclone.com Different things might require some privileges to work but still sometimes these might be useful. Vulns in th...

FMyClone 2.3 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =================================================== FMyClone 2.3 Multiple SQL Injection Vulnerabilities =================================================== FMyClone V2.3 Multiple SQLi By learn3r hacker from nepal Product name: FMyClone...

MyBB <= 1.4.6 Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================== MyBB = 1.4.6 Remote Code Execution Exploit =========================================== ?PHP / Someone decided to contact mybb's staff informing about this vulnerability with the obvious result th...

Limbo CMS 1.0.4.2 - Cross-Site Request Forgery / Privilege Escalation

Limbo cms v 1042Lt Cross-site request forgery Privilege Escalation Proof of Concept by Alfons Luja download : http://www.limboportal.com/index.php/option/downloads/task/download/id/67 d00rk: intext:"site powered by limbo" inurl:task=register Sytuacion is similar to last vuln in Coppermine...

MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...

Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability

No description provided by source. ============================================================ Rianxosencabos CMS 0.9 Arbitrary Add-Admin Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Anata CMS 1.0b5 - change.php Arbitrary Add Admin

Anata CMS 1.0b5 - change.php Arbitrary Add Admin =============================================== Anata CMS 1.0b5 Arbitrary Add-Admin Exploit =============================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

IPTBB 0.5.6 - Arbitrary Add Admin

IPTBB 0.5.6 - Arbitrary Add Admin ========================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ========================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Wordpress <= 2.3.1 Charset Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Wordpress Affected version: WordPress = 2.3.1 Exploit type: Remote Risk: Moderate CVE: pending 1. Summary 2. Detail 3. Proof of concept 4. Workaround 1. Summary Quoting from...

hackflatnuke.txt

/ hackflatnuke.txt Tested on 2.6 FlatNuke version can work on 3 but it has to be modified With this trick you can steal/modifie a flatnuke account by changing the password and all the profile or change your profile and become an admin Requirements: - You have to know the nickname of the account u...