5007 matches found
D-Link DCS-2103 1.20 CSRF / Cross Site Scripting Vulnerabilities
Exploit for hardware platform in category web applications There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DCS-2103, Firmware...
WordPress Author Manager 1.0 Cross Site Scripting
Title: WordPress 'Author Manager' Plugin Version: 1.0 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-16 Download: - https://wordpress.org/plugins/author-manager/ - https://plugins.svn.wordpress.org/author-manager/ Notified Vendor/WordPress: 2015-06-21...
D-Link DCS-2103 1.20 CSRF / Cross Site Scripting
Hello list! There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DCS-2103, Firmware 1.0.0. Version 1.20 and previous versions also mus...
NewStatPress <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
An insufficient user input validation of HTTP-Header: "Referer" results in a persistent XSS in the WordPress admin-panel. An attacker may be able to access any cookies, session tokens or other sensitive information retained by the browser and used with that site...
WP-Stats <= 2.51 - CSRF & Stored Cross-Site Scripting (XSS)
Stored XSS in wordpress-admin-panel enabled by CSRF vulnerability in the admin-menu. Discovered by the HSASec-Team...
Milw0rm Clone Script 1.0 - '/admin/login.php' Authentication Bypass
| Exploit Title: Milw0rm Clone Script v1.0 Auth Bypass SQL Injection Vulnerability | | Date: 06.13.2015 | | Exploit Daddy: Walid Naceri | | Vendor Homepage: http://milw0rm.sourceforge.net/ | | Software Link: http://sourceforge.net/projects/milw0rm/files/milw0rm.rar/download | | Version: v1.0 | |...
WordPress Yoast 2.1.1 Cross Site Scripting
============================================================ Info ============================================================ Affects: Yoast Wordpress SEO Plugin ============================================================ Vulnerable Code =================================...
FiverrScript CSRF Vulnerability (Add New Admin) Vulnerability
Exploit for php platform in category web applications Exploit Title: FiverrScript CSRF Vulnerability add New admin Author: Mahmoud Gamal @Zombiehelp54 Google Dork: intext:Powered by FiverrScript Date: 10/06/2015 Exploit Author: Scriptolution Vendor Homepage: http://scriptolution.com Software Link...
FiverrScript - Cross-Site Request Forgery (Add Admin)
FiverrScript - Cross-Site Request Forgery Add Admin Exploit Title: FiverrScript CSRF Vulnerability add New admin Author: Mahmoud Gamal @Zombiehelp54 Google Dork: intext:Powered by FiverrScript Date: 10/06/2015 Exploit Author: Scriptolution Vendor Homepage: http://scriptolution.com Software Link:...
Chmool Net 2 SQL Injection / Unauthenticated Administrative Access
| Title : chmool net V2 Mullti Vulnerability | Author : indoushka | email : [email protected] | Dork : Ahmed Ellefy c 2014 | Tested on: win8.1 Fr V.Pro 23:11 22/05/2015 | Bug : Mullti | Download : http://www.traidnt.com ======================================= By pass Admin panel :...
CVE-2012-1665
Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow 1 remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or 2 remote administrators to execute arbitrary SQL commands via the status parameter to...
CVE-2012-1664
Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the 1 status parameter to admin/statsmonthlysales.php or 2 country parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...
Sql injection
Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow 1 remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or 2 remote administrators to execute arbitrary SQL commands via the status parameter to...
CVE-2012-6691
Multiple cross-site request forgery CSRF vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the 1 status parameter to admin/statsmonthlysales.php or 2 country parameter...
CVE-2012-1664
Multiple cross-site scripting XSS vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter in a process action to admin/login.php; 2 pageTitle, 3 currentproductid, or 4 cPath parameter to...
CVE-2012-1665
CVE-2012-1665 affects osCMax prior to v2.5.1 with multiple SQL injection flaws in the admin panel. The vulnerabilities allow remote attackers to inject SQL via: (1) username in admin/login.php, (2) status in admin/stats_monthly_sales.php, and (3) country in admin/create_account_process.php. These...
CVE-2012-1664
osCMax 2.5.1 fixes CVE-2012-1664 (and related CVE-2012-1665) XSS and SQLi vulnerabilities in the admin panel. The advisory describes multiple reflected XSS vectors in admin/login.php, admin/new_attributes_include.php, admin/htaccess.php, admin/information_form.php, admin/xsell.php, and several st...
CVE-2012-1665
Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow 1 remote attackers to execute arbitrary SQL commands via the username parameter in a process action to admin/login.php or 2 remote administrators to execute arbitrary SQL commands via the status parameter to...