mojoportal - Multiple Vulnerabilities

mojoportal - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery :...

mojoportal - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : mojoportal Multiple Remote Vulnerabilities Affected Version : mojoPortal 2-3-4-3 Discovery : www.Abysssec.com Vendor :...

Month Of Abysssec Undisclosed Bugs - aradBlog 1.2.8

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | http://Example.com/downloads/uploads/2010725she...

Month Of Abysssec Undisclosed Bugs - IfNuke 4.0.0 XSS / Shell Upload

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | img634150553723437500.aspx That 634150553723437500 value is DateTime.Now.Ticks.ToString and will be built in this file : http://Example.com/Modules/PreDefinition/PhotoUpload.ascx.cs Ln 102 : fileName = "img" +...

DMXready Polling Booth Manager SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXready Polling Booth Manager SQLi Vulnerability Vendor url:http://www.dmxready.com Version:1 Price:79$ Published: 2010-09-6 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j, TheExploited,...

DMXready Polling Booth Manager - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXready Polling Booth Manager SQLi Vulnerability Vendor url:http://www.dmxready.com Version:1 Price:79$ Published: 2010-09-6 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j, TheExploited,...

IfNuke Multiple Remote Vulnerabilities

Exploit for asp platform in category web applications ====================================== IfNuke Multiple Remote Vulnerabilities ====================================== Title : IfNuke Multiple Remote Vulnerabilities Affected Version : IfNuke 4.0.0 Discovery : www.abysssec.com Vendor :...

Visinia 1.3 Multiple Vulnerabilities

Exploit for asp platform in category web applications ==================================== Visinia 1.3 Multiple Vulnerabilities ==================================== Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery : www.abysssec.com Vendor : http://www.visinia.com...

visinia 1.3 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | |...

visinia 1.3 - Multiple Vulnerabilities

visinia 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 0day | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery :...

Shop Creator 4.0 Bypass Vulnerability

Exploit for asp platform in category web applications ===================================== Shop Creator 4.0 Bypass Vulnerability ===================================== --------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com...

Shop Creator 4.0 - SQL Injection

Shop Creator 4.0 - SQL Injection --------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

Adobe ColdFusion - Directory Traversal

Adobe ColdFusion - Directory Traversal Working GET request courtesy of carnal0wnage: http://server/CFIDE/administrator/enter.cfm?locale=../../../../../../../../../../ColdFusion8/lib/password.properties%00en LLsecurity added another admin page filename: "/CFIDE/administrator/enter.cfm"...

NavanaSoft Auth Bypass vulnerability

Exploit for php platform in category web applications ==================================== NavanaSoft Auth Bypass vulnerability ==================================== ? My home: HacKTeach.org & Pal-Li0ns.com & sec-r1z.com ? For Ask: email protected ? Script: NavanaSoft ? home Script NavanaSoft.com ...

Cross-site Request Forgery (CSRF) Vulnerabilities in FestOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in FestOS which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in FestOS 1.1 The vulnerability exists due to insufficient validation of the request origin in...

2CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ================================ 2CMS SQL Injection Vulnerability ================================ Exploit Title: 2CMS SQL Injection Vulnerability Software Site: http://www.2creative.com.au/ CVE : N/A Author: Ashiyane Digital Security Team...

DibiWeb (News.asp) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== DibiWeb News.asp SQL Injection Vulnerability ============================================== Exploit Title: DibiWeb News.asp SQL Injection Vulnerability Software Site: http://www.dibiweb.it/ CVE :...

CVE-2010-2003

Cross-site scripting XSS vulnerability in misc/getadmin.php in Advanced Poll 2.08 allows remote attackers to inject arbitrary web script or HTML via the mysqlhost parameter...

Web Design Solutions SQL Injection

JAI HIND Tybe: SQL Injection Vulnerabilities Vendor: http://www.webdesignsolution.co.uk + author: мαsŧєяs + TEAM: H.O.H------ICW--------ANDHRAHACKERS D0rk: Us3 ur brain ? contact: rdon111 AT gmail.com ====================================================================================== SQL...

eliteCMS 1.01 Cross Site Request Forgery

Vulnerability ID: HTB22355 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...