Claroline 1.11.8 Cross Site Scripting Vulnerability

Malicious users can inject JavaScript, HTML. and attacker can steal the session cookie and take over the account. Exploit Title: Claroline 1.11.8 Cross Site Scripting Date: 2013 11 October Author: Arsan Software Homepage: http://www.claroline.net Version : 1.11.8 Security Risk: High Tested on:...

WordPress Social Hashtag 2.0.0 Cross Site Scripting

Exploit Title: WordPress Social Hashtag 2.0.0 Cross Site Scripting Date: 2013 2 October Author: Arsan Software Link: http://wordpress.org/plugins/social-hashtags/‎ Version : 2.0.0 Tested on: Linux & Windows Category: webapps + Exploit : - Description : 1 Download "Social Hashtag" And Install 2 Go...

Piwigo 2.5.2 Cross Site Scripting

Piwigo 2.5.2 Cross Site Scripting Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode...

ReadMore CMS Multiple Vulnerability

Website Powered By ReadMore Systems, Incorporated SQL Injection And XSS In viewnews.php Parameter "id" Exploit Title: ReadMore CMS Multiple Vulnerability Date: 2013 29 September Author: Arsan Vendor Homepage: http://readmoresystems.com Version : All Version Tested on: Linux & Windows Category:...

Piwigo 2.5.2 - Cross-Site Scripting

Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode http://localhost/piwigo/admin.php?page=batchmanager&mode=un...

WordPress Comment Attachment 1.0 Cross Site Scripting

Exploit Title: WordPress Comment Attachment 1.0 Discussion Comment Attachment 3 Insert In "Attachment field title" This Code And Save : "alert/Arsan/ 4 And Try To See Your Post And Comment; Follow Link : http://localhost/wp/?p=1 You See Alert "Arsan" ; + Contact Me : [email protected]...

phpLinks Cross Site Scripting

Exploit Title: PhpLinks Cross Site Scripting Vulnerability Date: 2013 15 September Author: Arsan Vendor Homepage: www.newphplinks.com Version : All Version Tested on: Linux & Windows Category: webapps Google Keywords: inurl:"/index.php?PID=" intext:"Powered By phpLinks" + Exploit :...