Novius OS Open Redirect Vulnerability

Novius OS is an open source PHP-based content management system CMS. An open redirect vulnerability exists in Novius OS version 5.0.1. A remote attacker can exploit the vulnerability by redirecting users to an arbitrary web site via a URL in the 'redirect' parameter of the admin/nos/login URI to...

Milw0rm Clone Script SQL Injection Vulnerability

Milw0rm is a hacking and defense interest group that provides security services such as vulnerability mining, security information, hacking and defense, security tools and other security services for IT technicians.Milw0rm Clone Script is a script for sharing and managing the Milw0rm website's...

CVE-2015-4658

Multiple SQL injection vulnerabilities in admin/login.php in Milw0rm Clone Script 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 usr or 2 pwd parameter...

Vevocart 6.1.0 Open Redirect

Affected software: vevocart Type of vulnerability:url redirection URL:vevocart.com Discovered by: provensec Website: provensec.com version:VevoCart 6.1.0 Proof of concept http://multistore1.vevocart.com/admin/Login.aspx?ReturnUrl=%2f%2fgoogle.com...

DouPHP 1.2 /admin/login.php 验证码绕过漏洞

No description provided by source...

MyCOM 1.0 /admin/login.php SQL注入漏洞

No description provided by source...

Smart PHP Poll - Authentication Bypass

Smart PHP Poll - Authentication Bypass Exploit Title: Smart PHP Poll Auth Bypass Vulnerability Google Dork: Copyright � Smart PHP Poll. All Rights Reserved. Exploit Author: Mr.tro0oqy from Yemen Email : [email protected] Download Script...

Default Password Vulnerability in Youyou's Email System of Shenzhen Hechen Communication Technology Co.

Shenzhen Hechen Communication Technology Co., Ltd. Youyou mail system is a modern enterprise to set up a professional e-mail service of a set of overall solutions, the mail system not only provides the conventional e-mail functions, but also extends the e-mail monitoring, e-mail antivirus, e-mail...

CVE-2015-2103

Cross-site scripting XSS vulnerability in the admin-login panel admin/index.cgi in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field uname parameter...

CVE-2015-2103

Cross-site scripting XSS vulnerability in the admin-login panel admin/index.cgi in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field uname parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the admin-login panel admin/index.cgi in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field uname parameter...

CVE-2015-2103

Cross-site scripting XSS vulnerability in the admin-login panel admin/index.cgi in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field uname parameter...

CVE-2015-2103

CVE-2015-2103 describes a Cross‑site Scripting (XSS) flaw in Cosmoshop’s admin-login panel (admin/index.cgi). The vulnerability allows remote attackers to inject arbitrary web script or HTML through the username field (u_name parameter). According to the NVD entry, the impact is partial integrity...

Cosmoshop - XSS on Admin-Login Mask

author: l0om page: l0om.org date: 14.02.2015 Cosmoshop is a simple webshop designed for the german market. There is a simple XSS flaw at the admin-login panel in probably all cosmoshop versions. The admin login can be found at http://www.shop-site.de/cgi-bin/cosmoshop/admin/index.cgi This page wi...

Cosmoshop Cross Site Scripting

author: l0om page: l0om.org date: 14.02.2015 Cosmoshop is a simple webshop designed for the german market. There is a simple XSS flaw at the admin-login panel in probably all cosmoshop versions. The admin login can be found at http://www.shop-site.de/cgi-bin/cosmoshop/admin/index.cgi This page wi...

ecshop a CAPTCHA bypass logic vulnerability-vulnerability warning-the black bar safety net

Although the code is encrypted, but logically there is a point problem The problem ..\includes\clscaptcha.php By the verification function can be seen directly returned, and no authentication failure processing function checkword$word $recorded = isset$SESSION$this-sessionword ?...

RomPager Authentication Bypass Attempt - Misfortune Cookie

A vulnerability exists in RomPager web servers. The vulnerability is due to lack of sanitation of the Cookie header. A successful exploitation of this vulnerability allows an attacker to log into the web server under admin privileges...

Citrix CloudPlatform Default Credentials

The remote Citrix CloudPlatform web administration interface uses a known set of default credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid79641; scriptversion"1.5";...

clientResponse Client Management 4.1 - Cross-Site Scripting

Exploit Title: clientResponse Client Management XSS Vulnerability Date: 14-10-2014 Exploit Author: Halil Dalabasmaz Version: v4.1 Vendor Homepage: http://codecanyon.net/item/clientresponse-responsive-php-client-management/3797780 Tested on: Chrome & Iceweasel Vulnerability Description: ===Stored...

Monstra <= 3.0.1 Admin Bruteforce Limit Bypass

Monstra versions 3.0.1 and below keep a tally client side in a cookie to count login attempts, allowing an attacker to completely bypass their abuse functionality. admin/index.php :33-42 // Admin login if Request::post'loginsubmit' if Cookie::get'loginattempts' && Cookie::get'loginattempts' = 5...