4238 matches found
RV Article Publisher CSRF Vulnerability
No description provided by source. Exploit Title: RV Article publisher CSRF Vulnerability Date: 26/08/2012 Author: DaOne @LibyanCA Vendor: http://www.scripts4webmasters.com Greetings to LCA CSRF Add Admin html body onload=document.form0.submit; form method=POST name=form0...
AlstraSoft Article Manager Pro 1.6 - Blind SQL Injection Exploit
No description provided by source. /usr/bin/perl |+| Author: GoLdM --//-- -- AlstraSoft Article Manager Pro Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-++-\n; print - AlstraSoft Article Manager...
Article Script <= 1.6.3 (rss.php) Remote SQL Injection Vulnerability
No description provided by source. Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------...
Omnistar Article Manager Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20990/info Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...
WordPress iCopyright(R) Article Tools plugin <= 1.1.4 - SQL Injection
No description provided by source. Exploit Title: WordPress iCopyrightR Article Tools plugin = 1.1.4 SQL Injection Vulnerability Date: 2011-08-29 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/copyright-licensing-tools.zip...
AJ Article Persistent XSS Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r0073r...
Article Management System 2.1.2 Reinstall Vulnerability
No description provided by source...
bitweaver 2.8.1 Persistent XSS Vulnerability
No description provided by source. exploit title: persistant xss in bitweaver2.8.1 date: 22.o2.2o11 author: lemlajt software : bitweaver @ sourceforge.net version: 2.8.1 tested on: linux cve : PoC : 1. submit an article POST http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/articles/edit.ph...
Joomla Front-End Article Manager System Upload Vulnerability
No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla Front-End Article Manager System Upload Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...
ZeroCMS 1.0 - 'zero_transact_article.php' SQL Injection
ZeroCMS v1.0 SQL Injection Vulnerability zerotransactarticle.php articleid POST parameter Vendor: Another Awesome Stuff Product web page: http://www.aas9.in/zerocms Affected version: 1.0 Severity: High CWE: 89 - http://cwe.mitre.org/data/definitions/89.html CVE: CVE-2014-4194 Date: 20/06/2014...
PT-2014-5686
Name of the Vulnerable Software and Affected Versions ZeroCMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the article id parameter in the zero view article.php file. Recommendations For ZeroCMS version 1.0, consider restricting...
ZeroCMS 1.0 (article_id) SQL Injection Vulnerability
Summary ZeroCMS is a very simple Content Management System built using PHP and MySQL. Description Input passed via the 'articleid' GET parameter to zeroviewarticle.php script is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting...
Updated openssl packages fix multiple vulnerabilties
Updated openssl packages fix security vulnerabilities: It was found that OpenSSL clients and servers could be forced, via a specially crafted handshake packet, to use weak keying material for communication. A man-in-the-middle attacker could use this flaw to decrypt and modify traffic between a...
齐博CMS任意文件读取(鸡肋，需注册)
简要描述： RT 详细说明： 漏洞一:鸡肋的getshell需注册并能发布文章,需配合apache、iis6解析漏洞 文件 /inc/articfunction.php //采集外部图片 function getoutpic$str,$fid=0,$getpic=1 global $webdb,$lfjuid; if!$getpic return $str; pregmatchall"/http://^ '"+.gif|jpg|png/is",$str,$array; $filedb=$array0; foreach $filedb AS $key=$value if...
Security Update for Microsoft .NET Framework 3.5 on Windows 8 and Windows Server 2012 for x64-based Systems (KB2931357)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
CVE-2013-1804
Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the 1 highlight parameter to forum/viewthread.php; or remote authenticated users with certain permissions to inject arbitrary web script or HTML via the...
Mail.ru: Persistent XSS in afisha.mail.ru
Adding a comment to article, this makes javascript execution possible. POST: http://afisha.mail.ru/ext/addcomment/ Post Content alias=article&id=42797&pid=&count=20&commentbody=%5Btesting%5D+%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E&ok=%D0%94%D0%BE%D0%B1%D0%B0%D0%B2%D0%B8%D1%82%D1%8C also the...
Apple Releases Security Updates for Safari
Apple released Safari 6.1.3 and Safari 7.0.3 for OS X to address multiple vulnerabilities in WebKit. Software memory corruption issues may lead to information disclosure, unexpected application termination, or arbitrary code execution. Users and administrators are encouraged to review Apple Suppo...
Apple Releases QuickTime 7.7.5
Apple has released QuickTime 7.7.5 for Windows operating systems to address multiple vulnerabilities, which may lead to an unexpected application termination or arbitrary code execution. US-CERT encourages users and administrators to review Apple Support Article HT6151 and apply any necessary...