WordPress Contact Form DB Plugin <= 2.8.17 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability in Admin Area. Solution Update the plugin...

Picture Rating 1.0 - Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has...

Maian Recipe <= 1.2 Insecure Cookie Handling Vulnerability

No description provided by source. -+================================================================================+- -+ Maian Recipe = v1.2 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: S.W.A.T...

MTP Guestbook 1.0 - Multiple XSS Vulnerabilities

No description provided by source. ?!-- MTP Guestbook 1.0 Multiple Remote Script Insertion Vulnerabilities Vendor: MTP Scripts Product web page: http://www.morephp.net Affected version: 1.0 Summary: MTP Guestbook allows you to put a guestbook on your website. Your visitors can sign it and leave a...

CCLeague Pro <= 1.2 Insecure Cookie Authentication Vulnerability

No description provided by source. -+================================================================================+- -+ CCLeague Pro = 1.2 Insecure Cookie Authentication Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZ...

ActiveKB <= 1.5 Insecure Cookie Handling/Arbitrary Admin Access

No description provided by source. --==+================================================================================+==-- --==+ ActiveKB = 1.5 Insecure Cookie Handling/Arbitrary Admin Access +==-- --==+================================================================================+==--...

Quick.CMS 5.4 - Multiple Vulnerabilities

Quick.CMS 5.4 - Multiple Vulnerabilities Exploit Title: QuickCms 5.4 Multiple Vulnerabilites Date: 04/08/2014 Author: shpendk Software Link: http://opensolution.org/download,en,18.html?sFile=Quick.Cms/Quick.Cmsv5.4.zip Version: 5.4 Tested on: Xampp on Windows Reflected XSS Vulnerability in Admin...

QuickCms 5.4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: QuickCms 5.4 Multiple Vulnerabilites Date: 04/08/2014 Author: shpendk Software Link: http://opensolution.org/download,en,18.html?sFile=Quick.Cms/Quick.Cmsv5.4.zip Version: 5.4 Tested on: Xampp on Windows Reflected XSS Vulnerability in Admin Area: Trigger:...

Quick.CMS 5.4 - Multiple Vulnerabilities

Exploit Title: QuickCms 5.4 Multiple Vulnerabilites Date: 04/08/2014 Author: shpendk Software Link: http://opensolution.org/download,en,18.html?sFile=Quick.Cms/Quick.Cmsv5.4.zip Version: 5.4 Tested on: Xampp on Windows Reflected XSS Vulnerability in Admin Area: Trigger:...

WordPress HMS Testimonials 2.0.10 XSS / CSRF

Update ======================== Fixed wrong dates. Details ======================== Application: HMS Testimonials http://wordpress.org/plugins/hms-testimonials/ Version: 2.0.10 Type: Wordpress Plugin Vendor: Jeff Kreitner http://profiles.wordpress.org/kreitje/ Vulnerability: - Cross-Site Request...

Croogo 1.3.5 Cross Site Scripting

Exploit Title: Croogo Cms Multiple Cross Site Scripting Vulnerabilities Date: 06/04/2013 Author: Nikhalesh Singh Bhadoria Twitter: @nikhaleshsingh Download Link: http://www.croogo.org/ Versions Affected: Croogo 1.3.5 Category:Xss...

SweetRice CMS 1.2.5 Cross Site Scripting

Exploit Title: SweetRice Cms Multiple Cross Site Scripting Vulnerabilities Date: 06/01/2013 Author: Nikhalesh Singh Bhadoria Twitter: @nikhaleshsingh Download Link: http://www.basic-cms.org/ Versions Affected: SweetRice 1.2.5 Category:Xss...

Dotclear 2.5 Cross Site Scripting

Exploit Title: Dotclear 2.5 Cms Cross Site Scripting Vulnerabilities Date: 06/04/2013 Author: Nikhalesh Singh Bhadoria Twitter: @nikhaleshsingh Download Link:http://dotclear.org/ Versions Affected: Dotclear 2.5. Category:Xss...

Massive Brute-force attack Targets Wordpress sites worldwide

A large distributed brute force attack against WordPress sites is understood to be occurring. A large botnet with more than 90,000 servers is attempting to log in by cycling through different usernames and passwords. According to a blog update on IXWebHosting, they are currently experiencing issu...

PT-2012-4227

Name of the Vulnerable Software and Affected Versions phpList versions prior to 2.10.18 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sortby parameter in a find action, specifically targeting the public html/lists/admin area...

Funeral Script PHP Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications Funeral Script PHP - Multiple Web Vulnerabilites Introduction: ============= At your request and for a reasonable price, we may add or change features on the Funeral Script PHP. Funeral Script PHP requires PHP 4.3 or higher and MySQL 3 or high...

Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities

Title: ====== Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities Date: ===== 2012-06-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=605 VL-ID: ===== 605 Common Vulnerability Scoring System: ==================================== 5.5 Introduction:...

Event Calendar PHP 1.2 - Multiple Web Vulnerabilities

Document Title: =============== Event Calendar PHP 1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=607 Release Date: ============= 2012-06-18 Vulnerability Laboratory ID VL-ID: ==================================== 607...

Event Calendar PHP 1.2 - Multiple Web Vulnerabilities

Document Title: =============== Event Calendar PHP 1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=607 Release Date: ============= 2012-06-18 Vulnerability Laboratory ID VL-ID: ==================================== 607...

Funeral Script PHP - Multiple Web Vulnerabilities

Document Title: =============== Funeral Script PHP - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=604 Release Date: ============= 2012-06-16 Vulnerability Laboratory ID VL-ID: ==================================== 604 Commo...