iran.tv XSS vulnerability

Vulnerable URL: http://www.iran.tv/site/admin/login.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

svkexternwebbkap.svenskakyrkan.se XSS vulnerability

Vulnerable URL: https://svkexternwebbkap.svenskakyrkan.se/Admin/Login/Login.aspx?ReturnUrl=/default.aspx?id=1324984=1" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

ZEDx 2.0 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : ZEDx 2.0 - Blind SQL Injection Vulnerability Author : ZwX Version : ZEDx 2.0 Demo Online : http://demo.zedx.org/ Vendor : http://www.zedx.org/ Date : 09/12/2014 ------------------------------- Description ------------------------------...

SearchBlox File Exfiltration Vulnerability

OVERVIEW Oana Murarasu of Ixia has identified a file exfiltration vulnerability in SearchBlox’s web-based proprietary search engine application. SearchBlox has produced a new version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following...

Weak Password Vulnerability in Government Website Management System of E-Tron Networks

E-Tron web government website management system is a system for government Internet access system, government website system customization services. A weak password vulnerability exists in part of the back-end of the NetGov ad management system. An attacker can utilize the vulnerability to log in...

麦达特色库检索平台多处SQL注入#2

简要描述： 前几天提交了一次，说我跟http://wooyun.org/bugs/wooyun-2015-0120725 重复了， 这个也是我之前提交的，有一段时间了...除了都是SQL注入外，好像没什么共同点了吧, 不仅不是同一处，也不是同一类型的注入。 不知道是审核大哥没注意，还是乌云改规则了，同一SQL注入都算一个问题... 另外也不是刻意刷洞分开提交的，也是前几天看了下之前自己提交过的漏洞新发现的，不知道怎么没通过,之前这种都不算重复吧... 刚好今天又发现了一处问题，一起再提交一次。 详细说明： 刻意参见我之前提交的漏洞...

Seditio CMS 1.7.1 Open Redirect

Exploit Title: Seditio CMS Open Redirect + Google Dork: intext:"Powered by Seditio CMS" + Date: 27/7/2015 + Exploit Author: Arash Khazaei + Vendor Homepage: http://www.seditiocms.com/ + Software Link: http://www.seditiocms.com/page.php?id=20&a=dl + Version: 1.7.1Last Version + Tested on: Kali ,...

GWC CMS 1.0 SQL Injection Exploit

Exploit for php platform in category web applications Exploit Title: GWC CMS SQL Injection Vulnerability Exploit Author: nopesled Google Dork: "inurl:?langid=1 inurl:topmenuid=" Date: 08/07/2015 Version: 1.0 Tested on: Linux !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwGET; prin...

Milw0rm Clone Script 'admin/login.php' SQL Injection Vulnerability

Milw0rm Clone Script is a Milw0rm clone script. Milw0rm Clone Script 'admin/login.php' fails to properly filter user-supplied input and is vulnerable to multiple SQL injection vulnerabilities. This allows attackers to compromise the application, access or modify data, or exploit potential...

Novius OS Open Redirect Vulnerability

Novius OS is an open source PHP-based content management system CMS. An open redirect vulnerability exists in Novius OS version 5.0.1. A remote attacker can exploit the vulnerability by redirecting users to an arbitrary web site via a URL in the 'redirect' parameter of the admin/nos/login URI to...

Milw0rm Clone Script SQL Injection Vulnerability

Milw0rm is a hacking and defense interest group that provides security services such as vulnerability mining, security information, hacking and defense, security tools and other security services for IT technicians.Milw0rm Clone Script is a script for sharing and managing the Milw0rm website's...

CVE-2015-4658

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 usr or 2 pwd parameter...

Vevocart 6.1.0 Open Redirect

Affected software: vevocart Type of vulnerability:url redirection URL:vevocart.com Discovered by: provensec Website: provensec.com version:VevoCart 6.1.0 Proof of concept http://multistore1.vevocart.com/admin/Login.aspx?ReturnUrl=%2f%2fgoogle.com...

DouPHP 1.2 /admin/login.php 验证码绕过漏洞

No description provided by source...

MyCOM 1.0 /admin/login.php SQL注入漏洞

No description provided by source...

Smart PHP Poll - Authentication Bypass

Smart PHP Poll - Authentication Bypass Exploit Title: Smart PHP Poll Auth Bypass Vulnerability Google Dork: Copyright � Smart PHP Poll. All Rights Reserved. Exploit Author: Mr.tro0oqy from Yemen Email : [email protected] Download Script...

Default Password Vulnerability in Youyou's Email System of Shenzhen Hechen Communication Technology Co.

Shenzhen Hechen Communication Technology Co., Ltd. Youyou mail system is a modern enterprise to set up a professional e-mail service of a set of overall solutions, the mail system not only provides the conventional e-mail functions, but also extends the e-mail monitoring, e-mail antivirus, e-mail...

CVE-2015-2103

Cross-site scripting XSS vulnerability in the admin-login panel admin/index.cgi in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field uname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the admin-login panel admin/index.cgi in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field uname parameter...

CVE-2015-2103

Cross-site scripting XSS vulnerability in the admin-login panel admin/index.cgi in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field uname parameter...