CVE-2012-2917

Cross-site scripting XSS vulnerability in the Share and Follow plugin 1.80.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the CDN API Key cnd-key in a share-and-follow-menu page to wp-admin/admin.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the LeagueManager plugin 3.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter in the show-league page or 2 season parameter in the team page to wp-admin/admin.php...

WordPress GRAND Flash Album Gallery Plugin 1.71 - Cross Site Scripting

WordPress GRAND Flash Album Gallery plugin's "admin.php" is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

GetSimple CMS 3.1 admin/index.php Multiple Parameter Reflected XSS

GetSimple CMS 3.1 admin/index.php Multiple Parameter Reflected XSS. CVE-2012-6621. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53501/info GetSimple CMS is prone to HTML-injection and cross-site scripting vulnerabilities because it fails to properly sanitize...

Multiicon Software Web Media Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================================================== Multiicon Software Web Media Sql injection Vulnerability By Sideswipe ============================================================================== + Exploit Title...

Gold Coast Web Design SQL Injection

Exploit Title : Gold Coast Web Design Sql Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : http://goldcoastwebdesign.com Contact : [email protected] , [email protected] Security Risk : High Dork ...

admin/fixcwdmemberships.jsp lacks an XSRF token to run the repair action.

admin/fixcwdmemberships.jsp does not require a csrf token to run the repair action. When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

CVE-2012-1670

admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action...

Disable browser password save on Admin page in Firefox

In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I get prompted to save the password. We are only concerned about this for the Admin page password prompt specifically...

Disable browser password save on Admin page in Firefox

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-25008. panel In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I ge...

Disable browser password save on Admin page in Firefox

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Server. Using Confluence Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFCLOUD-25008. panel In Chrome, Safari and IE there is no browser prompt to store the password but on Firefox both Mac and Windows I get...

CnnCMS 1.x SQL Injection Vulnerability

Exploit for php platform in category web applications :-------------------------------------------------------------------------------------------------------------------------: : Exploit Title : CnnCMS 1.x SQL Injection Vulnerability : Date : March 3rd 2012 : Author : X-Cisadane : Software Link ...

CityVariety SQL Injection

================================================================================= Web : ashiyane.org e-mail : HashoR DOT BackHat AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!- ================================================================================...

CityVariety SQL Injection Vulnerability

Exploit for php platform in category web applications Web : ashiyane.org e-mail : HashoR DOT BackHat AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!- ------|-------------------------------------------------------|------ Exploit : CityVariety Demo: Demo:...

Inet Revolution SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Exploit Title: Inet Revolution http://gyankalash.com/pages.php?q=14' - http://stvishnaschool.com/pages.php?q=4' - http://concordsecurity.org/service.php?id=4' - Admin Pag...

ecshop 4 8 leak site path vulnerability-vulnerability warning-the black bar safety net

http:// 网站 /shop/api/cron.php http:// 网站 /shop/wap/goods.php http:// 网站 /shop/temp/compiled/urhere.lbi.php http:// 网站 /shop/temp/compiled/pages.lbi.php http:// 网站 /shop/temp/compiled/usertransaction.dwt.php http:// 网站 /shop/temp/compiled/history.lbi.php http:// 网站...

Climeweb Remote SQL Injection

========================================================================== Exploit Title: Climeweb Blind SQL Injection Vulnerability Date: 11.10.2011 Author: poach3r Software Link: http://www.climeweb.com/ Tested on: Windows XP SP3 Google Dork: "Powered by Climeweb" inurl:"indux.php"...

The Formula Group SQL Injection

============================================ Exploit Title : The Formula Group Auth bypass Google Dork : intext:"WEB DESIGN BY THE FORMULA" Date : 2011-2-10 Author : nGa Sa Lu GaNgst3r Service Link : http://www.theformula.co.za/index.phptheform Tested on : Vista Platform : asp...

CVE-2011-3708: Exposure of Sensitive Information to an Unauthorized Actor

Automne 4.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by admin/page-redirect-info.php...

PT-2011-4598

Name of the Vulnerable Software and Affected Versions Automne version 4.0.2 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing the admin/page-redirect-info.php endpoint, which reveals the installatio...