CMS SiteLogic Cross Site Scripting / Shell Upload

Hello Full-Disclosure! I want to warn you about new security vulnerabilities in CMS SiteLogic. It's Ukrainian commercial CMS. In addition to previously reported vulnerabilities, I will report about vulnerabilities in this CMS, which I disclosed in 2009 it's second advisory with vulnerabilities...

HTTP File Server Security Bypass and Denial of Service Vulnerabilities

HTTP File Server is prone to multiple vulnerabilities including a security- bypass issue and a denial-of-service issue. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Banner Manager <= 0.81 (Auth Bypass) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================ Banner Manager = 0.81 Auth Bypass SQL Injection Vulnerability ================================================================ @Title: Banner Manager = 0.81 Auth Bypass SQL...

Announcement Preview banner is a vector for an XSS attack

The announcement preview banner is currently displayed via the global decorator. It can be used for an XSS attack on virtually every page, via the announcementpreviewbannerst URL parameter. We should display the preview only locally in the admin section...

Joomla Easy Ad Banner 0.25 Local File Inclusion

================================================================================================================= o Joomla Component Easy Ad Banner Local File Inclusion Vulnerability Software : comadvertising version 0.25 Vendor : http://dev.pucit.edu.pk/ Download :...

Joomla! Component Advertising 0.25 - Local File Inclusion

Joomla! Component Advertising 0.25 - Local File Inclusion ================================================================================================================= o Joomla Component Easy Ad Banner Local File Inclusion Vulnerability Software : comadvertising version 0.25 Author :...

Joomla! Component Advertising 0.25 - Local File Inclusion

================================================================================================================= o Joomla Component Easy Ad Banner Local File Inclusion Vulnerability Software : comadvertising version 0.25 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf s4va Contact :...

Moodle 1.8.x < 1.8.12, 1.9.x < 1.9.8 Multiple Vulnerabilities

Moodle is prone to multiple vulnerabilities. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

webMAID Detection

This host is running webMAID CMS. webMAID CMS is a flatfile CMS system based on PHP and XML. OpenVAS Vulnerability Test $Id: gbwebMAIDdetect.nasl 5736 2017-03-27 13:36:24Z cfi $ webMAID Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free...

Discloser 'more' Parameter SQL Injection Vulnerability

Discloser is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WorkgroupShare Server Detection

Checks if WorkgroupShare Server is running on the remote host. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

MoinMoin Wiki 'cfg' Package Configuration Unspecified Vulnerability

MoinMoin Wiki is prone to unspecified vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moinmo:moinmoin";...

MoinMoin Wiki Version Detection

Detection of MoinMoin Wiki. This script detects the installed version of MoinMoin Wiki. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Micronation Banking System Command Execution

!/usr/bin/perl MiNBank 1.5.0 Remote Command Execution Exploit download: http://downloads.sourceforge.net/minbank/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! This was...

Limny Version Detection

Detection of Limny. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

POP3 Banner Grabber

POP3 Banner Grabber This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'POP3 Banner Grabber', 'Description' = 'POP3 Banner Grabber', 'Author' = 'hdm', 'License' = MSFLICENSE registeroptions...

IMAP4 Banner Grabber

IMAP4 Banner Grabber This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'IMAP4 Banner Grabber', 'Description' = 'IMAP4 Banner Grabber', 'Author' = 'hdm', 'License' = MSFLICENSE end def runhostip...

SMTP Banner Grabber

SMTP Banner Grabber This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SMTP Banner Grabber', 'Description' = 'SMTP Banner Grabber', 'References' = 'URL', 'http://www.ietf.org/rfc/rfc2821.txt', ,...

geccBBlite Version Detection

This script finds the running geccBBlite version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Softbiz Jobs Cross Site Scripting

======================================================================= Softbiz Jobs XSS Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Insert New Banner module email [email protected] company aksitservices Credit b...