ClanTiger Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ======================================= ClanTiger Multiple CSRF Vulnerabilities ======================================= Exploit Title: ClanTiger 1.3 Multiple CSRF, delete user, shoutbox items, news, ??? ban/unban user, delete forum etc. Date: ...

Sandbox Multiple Remote Vulnerabilities

Sandbox is prone to multiple remote vulnerabilities, including multiple SQL-injection vulnerabilities, a local file-include vulnerability, and multiple arbitrary-file-upload vulnerabilities. Exploiting these issues could allow an attacker to upload and execute arbitrary code within the context of...

Sandbox Multiple Remote Vulnerabilities

Sandbox is prone to multiple remote vulnerabilities, including multiple SQL-injection vulnerabilities, a local file-include vulnerability, and multiple arbitrary-file-upload vulnerabilities. Exploiting these issues could allow an attacker to upload and execute arbitrary code within the context of...

PreProject Multi-Vendor Shopping Malls - SQL Injection / Authentication Bypass

--------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 ---------------------------------------------------------------------------...

MooreAdvice (productlist.asp) SQL injection Vulnerable

Exploit for asp platform in category web applications ========================================================= MooreAdvice productlist.asp SQL Injection Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

VUPEN Security Research - Adobe Acrobat and Reader "newfunction" Memory Corruption Vulnerability (CVE-2010-2168)

VUPEN Security Research - Adobe Acrobat and Reader "newfunction" Memory Corruption Vulnerability CVE-2010-2168 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Acrobat and Reader are the global standards for electronic document sharing. They are used to create,...

YPNinc PHP Realty Script - 'docID' SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- YPNinc...

HoloCMS 9.0.47 (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== HoloCMS 9.0.47 news.php SQL Injection Vulnerability ===================================================== +Title: HoloCMS 9.0.47 news.php SQL Injection Vulnerability + About : Author :...

Customer Paradigm PageDirector - 'id' SQL Injection

source: https://www.securityfocus.com/bid/41184/info Customer Paradigm PageDirector is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Web Application Security Scanner: w3af

w3af is a Web Application Attack and Audit Framework The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. Identify and exploit a SQL injection One of the most difficult parts of securing your application is to identify the...

Nakid CMS 'core[system_path]' Parameter Remote File Inclusion Vulnerability

This host is running Nakid CMS and is prone to remote file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodnakidcmsrfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Nakid CMS 'coresystempath' Parameter Remote File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2010...

PreProject Multi-Vendor Shopping Malls - products.php SQL Injection

PreProject Multi-Vendor Shopping Malls - products.php SQL Injection source: https://www.securityfocus.com/bid/41074/info Pre Multi-Vendor Shopping Malls is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities (CVE-2010-2167)

VUPEN Security Research - Adobe Flash Player GIF/JPEG Data Parsing Heap Overflow Vulnerabilities CVE-2010-2167 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Adobe Flash Player is a cross-platform browser-based application runtime that delivers uncompromised viewin...

CMS RedAks 2.0 - Multiple Cross-site Scripting issues

Exploit for php platform in category web applications ===================================================== CMS RedAks 2.0 - Multiple Cross-site Scripting issues ===================================================== Details ============= Product: CMS RedAks 2.0 Security-Risk: moderated...

CMS RedAks 2.0 - SQL Injection vulnerability

Exploit for php platform in category web applications ============================================ CMS RedAks 2.0 - SQL Injection vulnerability ============================================ Details ============= Product: CMS RedAks v.2.0 Security-Risk: high Remote-Exploit: yes Vendor-URL:...

2DayBiz ybiz Network Community Script - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/40913/info 2daybiz Network Community Script is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

[MajorSecurity SA-073]Subdreamer CMS - SQL injection vulnerability

MajorSecurity SA-073Subdreamer CMS - SQL injection vulnerability Details ============= Product: Subdreamer CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.subdreamer.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz...

[MajorSecurity SA-071]phpFaber CMS - Multiple stored Cross-site Scripting issues

MajorSecurity SA-071phpFaber CMS - Multiple stored Cross-site Scripting issues Details ============= Product: phpFaber CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.phpfaber.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz...

AneCMS 1.x - modulesblogindex.php SQL Injection

AneCMS 1.x - modulesblogindex.php SQL Injection source: https://www.securityfocus.com/bid/40840/info AneCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability CVE-2010-1392 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with...