CVE-2017-6914

CSRF exists in BigTree CMS 4.1.18 and 4.2.16 with the id parameter to the admin/ajax/users/delete/ page. A user can be deleted...

Cross site scripting

Cross-site scripting XSS vulnerability in CMS Made Simple CMSMS 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage sitesetting General Settings globalmetadata" field...

Diazcreativos Cms Bypass Admin Page Vulnerability

Exploit for php platform in category web applications |=============================================================| |-------------------In The Name Of God------------------------| | | Exploit Title: Diazcreativos Cms Bypass Admin Page Vulnerability | | Exploit Author: Ashiyane Digital Security...

Cross-site scripting vulnerability in the 'adminfrom.php' page of the DM website builder system

DM enterprise building system is developed by php + mysql for small and medium-sized enterprise website construction of a set of open source cms. A cross-site scripting vulnerability exists in the 'adminfrom.php' page of the DM website builder system. The program fails to filter user-supplied...

WordPress Image Gallery 1.9.65 Cross Site Scripting Vulnerability

WordPress Image Gallery plugin version 1.9.65 suffers from a persistent cross site scripting vulnerability. ------------------------------------------------------------------------ Stored Cross-Site Scripting in Gallery - Image Gallery WordPress Plugin...

WordPress All In One WP Security And Firewall Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site.All In One WP Security & Firewall is one of the security management and firewall plug-ins. A cross-site scripting...

SQL injection vulnerability in mallbuilder frontend admin/index.php page

MallBuilder is a multi-user online shopping mall solution system based on PHP+MYSQL. A SQL injection vulnerability exists in the admin/index.php page of mallbuilder, which allows attackers to obtain sensitive database information using common SQL injection tools...

Easy to enterprise network Cms Admin Page Bypass

No description provided by source...

RDL Web Tasarim Administration Page Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in the RDL Web Tasarim administrator page, which could allow an attacker to bypass login authentication to access backend administration pages...

miniblog Cross-Site Request Forgery Vulnerability

miniblog is a lightweight blog and news system for websites written in PHP and MySQL. A cross-site request forgery vulnerability exists in the admin.php page of miniblog version 1.0.1, which can be exploited by attackers to add, delete, and edit posts...

Entrepreneur Job Portal Script 2.06 - SQL Injection

Entrepreneur Job Portal Script 2.06 - SQL Injection x========================================================================================================================================x | Title : Entrepreneur Job Portal Script SQL Injection | Software : Entrepreneur Job Portal Script | Versi...

B2B Portal Script Blind SQL Injection

x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Just Dial Clone Script - 'fid' SQL Injection

x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor : http://www.i-netsolution.com/ | Demo :...

PHP Classifieds Rental Script - Blind SQL Injection

x========================================================================================================================================x | Title : PHP Classifieds Rental Script Blind SQL Vulnerabilities | Software : PHP Classifieds Rental Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Imrokraft Solutions CMS Admin Page ByPass Vulnerability

Exploit for php platform in category web applications Exploit Title : Imrokraft Solutions CMS Admin Page ByPass Exploit Author : xBADGIRL21 Dork : intext:"Designed by Imrokraft Solutions" or intext:"Powered By : Imrokraft Solutions" Vendor : http://www.imrokraft.com/ Tested on: Windows...

The Realm / Dashgum Software CMS Admin Page ByPass Vulnerability

Exploit for php platform in category web applications Exploit Title : The Realm / Dashgum Software CMS Admin Page ByPass Exploit Author : xBADGIRL21 version The Realm : 1.0.1 version Dashgum : v2 Vendor : http://www.bluthemes.com/item/realm - http://gridgum.com/themes/dashgum-bootstrap-dashboard/...

Fastspot BigTree CMS SQL Injection Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An SQL injection vulnerability exists in the admin.php page in Fastspot BigTree CMS versions prior to 4.2.11, which can be exploited by an attacker to compromise an...

BLACKBOx - A Penetration Testing Framework

Password Attacks: MD5 CRACKER SHA1 CRACKER SHA224 CRACKER SHA256 CRACKER SHA384 CRACKER SHA512 CRACKER MSSQL2000 CRACKER MSSQL2005 CRACKER MYSQL323 CRACKER MYSQL41 CRACKER ORACLE11 CRACKER Web Hacking : Wordpress Bruteforce – Bruteforce wordpress panel FTP Bruteforce – Bruteforcing FTP LOGIN SSH...

Telepecas Script Admin Page Default Password Vulnerability

Telepecas Script is a web administration page. A default password vulnerability exists in the Telepecas Script administration page. This allows an attacker to exploit the default account password to obtain sensitive information...

Drupal Core Full config export configuration file unauthorized download vulnerability

Author: p0wd3r know Chong Yu 404 security lab 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities, one vulnerability...