WordPress Easy AdSense Lite Plugin <= 6.9 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that modify this plugin's settings. Solution Update the plugin...

WordPress Adsense Extreme Plugin 'adsensextreme[lang]' Parameter Remote File Include Vulnerability

The Adsense Extreme plug-in for WordPress is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

PHP Finance v1.0 - Multiple Web Vulnerabilities

Document Title: =============== PHP Finance v1.0 - Multiple Web Vulnerabilities Release Date: ============= 2011-07-16 Vulnerability Laboratory ID VL-ID: ==================================== 103 Product & Service Introduction: =============================== PHPFinance is a web based financial...

WordPress WPtouch Plugin <= 1.9.20 - XSS

Because of this vulnerability in lib/includes/auth.inc.php, the attackers can inject arbitrary web script or HTML via the "wptouchsettings" parameter to include/adsense-new.php. Solution Update the plugin...

http-affiliate-id NSE Script

Grabs affiliate network IDs e.g. Google AdSense or Analytics, Amazon Associates, etc. from a web page. These can be used to identify pages with the same owner. If there is more than one target using an ID, the postrule of this script shows the ID along with a list of the targets using it. Support...

ZeeMatri 3.x - Arbitrary File Upload

ZeeMatri 3.x - Arbitrary File Upload 1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.co...

PHP Calendars Scripts SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...

PHP Calendars Script SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:PHP Calendars Script SQL Vulnerable Vendor url:http://www.jce-tech.com Version:1 Price:n/a Published: 2010-06-21 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat. Special...

PHP Calendars Script SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ PHP Calendars Script SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\...

PHP Calendars Script - SQL Injection

PHP Calendars Script - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:PHP Calendars Script SQL Vulnerable Vendor...

PHP Calendars Script - SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:PHP Calendars Script SQL Vulnerable Vendor url:http://www.jce-tech.com Version:1 Price:n/a Published:...

AdMan Standalone Ad Server Cross Site Scripting / SQL Injection

=========================================================== AdMan Standalone Ad Server SQLi AND XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

vBulletin Adsense SQL Injection

------------------------------ »JIKO »No-exploit.Com »Composant Of Vbulletin -------------- »EXPLOIT viewpage.php?do=show&id=-1 union select 0,1,2-- viewpage.php?do=show&id=-1 union select 0,user,2-- ------------------- you can select the password and username from users table of Forum vbulletin...

vBulletin Adsense Component - viewpage.php SQL Injection

vBulletin Adsense Component - viewpage.php SQL Injection source: https://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

vBulletin Adsense Component - 'viewpage.php' SQL Injection

source: https://www.securityfocus.com/bid/38167/info The vBulletin Adsense component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ SiteBuilderElite1.2 Multiple Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors...

CVE-2007-2828

Cross-site request forgery CSRF vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors...

CVE-2007-2828

CVE-2007-2828: CSRF in the WordPress AdSense-Deluxe (0.x) plugin via adsense-deluxe.php. Allows remote attackers to perform actions as arbitrary users. Connected docs specify the affected plugin and CSRF risk but do not detail vectors or root cause beyond the CSRF class issue. Remediation: update...

CVE-2007-2828

Cross-site request forgery CSRF vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors...