ReloadCMS <= 1.2.5 Cross Site Scripting / Remote Code Execution Exploit

No description provided by source. ?php / ReloadCMS = 1.2.5stable Cross site scripting / remote command execution software site: http://reloadcms.com/ description: ReloadCMS is a free CMS written on PHP and based on flat files. vulnerability: ReloadCMS do not properly sanitize User-Agent request...

Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities

No description provided by source. Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d 10n1z3datwdotcn Date: Sat 10 Jul 2010 08:05:44 PM EEST Vendor: http://elitecms.net/ Download: http://elitecms.net/download.php?download=eliteCMS -= CSRF PoC 1 - Change Admin Password =- html...

JBS 2.0 / JBSX - Administration panel Bypass and File Upload Vulnerability

No description provided by source. Administration panel bypass and Malicious File Upload Vulnerability JBS v2.0 JBSX and other Jiro's Products Google Dork: inurl:/files/redirect.asp Go to url files/login.asp admin 'or' '=' password 'or' '=' H4ckers may upload malicious files by using upload panel...

ProductCart 1.5/1.6/2.0 Login.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8105/info ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to bypass the ProductCart authentication system and access the ProductCart administration panel; other attacks may also...

LinPHA 1.3.4 - Multiple Vulnerabilities

No description provided by source. Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Tested on:...

Piwigo 2.6.1 Cross Site Request Forgery

Exploit Title: piwigo 2.6.1 - CSRF Date: 26/02/2014 Exploit Author: [email protected] Vendor Homepage: http://it.piwigo.org/ Software Link: http://it.piwigo.org/basics/downloads Version: 2.6.1 Tested on: Virtualbox debian A CSRF problem is present in the administration panel. Here it is a POF...

Piwigo 2.6.1 - Cross-Site Request Forgery

Piwigo 2.6.1 - Cross-Site Request Forgery Exploit Title: piwigo 2.6.1 - CSRF Date: 26/02/2014 Exploit Author: [email protected] Vendor Homepage: http://it.piwigo.org/ Software Link: http://it.piwigo.org/basics/downloads Version: 2.6.1 Tested on: Virtualbox debian A CSRF problem is present in the...

Piwigo 2.6.1 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: piwigo 2.6.1 - CSRF Date: 26/02/2014 Exploit Author: email protected Vendor Homepage: http://it.piwigo.org/ Software Link: http://it.piwigo.org/basics/downloads Version: 2.6.1 Tested on: Virtualbox debian A CSRF problem is prese...

LinPHA 1.3.4多个漏洞

No description provided by source. 1 Permanent XSS= ..... POST /linpha-1.3.4/actions/submitmoddata.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux i686; rv:26.0 Gecko/20100101 Firefox/26.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language:...

LinPHA 1.3.4 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: email protected Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version:...

LinPHA 1.3.4 - Multiple Vulnerabilities

LinPHA 1.3.4 - Multiple Vulnerabilities Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Teste...

LinPHA 1.3.4 - Multiple Vulnerabilities

Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Tested on: Virtualbox debian and Apache ===...

MyBB 1.6.12 - Admin Panel FPD & Multiple XSS

Latest mybb forums suffers on multiple persistent cross site scripting vulnerability and single full path disclosure. Probably, there are more bugs because of poor content filtration. Title: MyBB 1.6.12 - Admin Panel FPD & Multiple XSS Date: 01.11.2014 Tested on: Linux 3.7-trunk-686-pae 1 SMP...

Daily Dot News portal hacked by Syrian Electronic Army with phishing attack

Pro-Assad hacker group the Syrian Electronic Army claims to have breached the online news portal "Daily Dot" and deleted an article with a caricature of Syrian President Bashar al-Assad. SEA hackers gave an advance warning to Daily Dot editorial team via twitter, said "Dear @dailydot, please remo...

Daily Dot News portal hacked by Syrian Electronic Army with phishing attack

Pro-Assad hacker group the Syrian Electronic Army claims to have breached the online news portal "Daily Dot" and deleted an article with a caricature of Syrian President Bashar al-Assad. SEA hackers gave an advance warning to Daily Dot editorial team via twitter, said "Dear @dailydot, please remo...

Cisco Identity Services Engine Software Administration Panel Cross-Site Scripting Vulnerability

A vulnerability in the search form of the Cisco ISE administration/monitoring panel could allow an unauthenticated, remote attacker to send a malicious script to an unsuspecting user. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by convincing...

http-coldfusion-subzero NSE Script

Attempts to retrieve version, absolute path of administration panel and the file 'password.properties' from vulnerable installations of ColdFusion 9 and 10. This was based on the exploit 'ColdSub-Zero.pyFusion v2'. See also: http-adobe-coldfusion-apsa1301.nse http-vuln-cve2009-3960.nse...

phpVms Virtual Airline Administration 2.1.9342.1.935 - SQL Injection

phpVms Virtual Airline Administration 2.1.9342.1.935 - SQL Injection ============================================================================================================= o phpVMS Virtual Airline Administration = SQL Injection Vulnerability Software : phpVMS Virtual Airline Administration...

phpVms Virtual Airline Administration 2.1.934/2.1.935 - SQL Injection

============================================================================================================= o phpVMS Virtual Airline Administration = SQL Injection Vulnerability Software : phpVMS Virtual Airline Administration Version : 2.1.934 & 2.1.935 Vendor : http://www.phpvms.net Author :...

Citadel Trojan Updates with Dynamic Config Mechanism that Streamlines Fraud Activity

The elusive authors of the Citadel Trojan have released a new version of their banking botnet malware and service. The latest version, the sixth since it debuted in January and dubbed Rain, includes a dynamic configuration mechanism that allows botmasters to inject malicious content to compromise...