Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC

No description provided by source. !-- + Title: Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC + Version: 2.0 Beta 1.1 not tested with older versions + Note: No need administrator to be logged : + Tested on: Linux Ubuntu 11.04 Google Chrome but will work in any other OS + Download...

Blakord Portal <= Beta 1.3.A (all modules) SQL Injection Vulnerability

No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Blakord Portal = Beta 1.3.A all modules Blind Sql Injection +==-- --==+====================================================================================+==-- +...

Sambar Server 6.1 beta 2 show.asp show Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10444/info Sambar Server is reportedly prone to multiple vulnerabilities. These issues may allow an attacker to access sensitive files and carry out directory traversal and cross-site scripting attacks. These issues requi...

Bloggeruniverse 2.0 Beta - (editcomments.php id) SQL Injection Exploit

No description provided by source...

Filmis 0.2 Beta Multiple Vulnerabilities

No description provided by source. =================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis - Versio...

Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability

No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...

Google Chrome <= 6.0.472 'Math.Random()' Random Number Generation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36185/info Google Chrome is prone to security vulnerability that may allow the application to generate weak random numbers. Successfully exploiting this issue may allow attackers to obtain sensitive information or gain...

CiviCRM 3.1 < Beta 5 Multiple XSS Vulnerabilities

No description provided by source. Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: 3.1 Beta 5, Tested on 3.1 Beta 1 Tested on: BT4 pre-final Greetz ...

Drake CMS 0.3.7 404.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Plogger = Beta 2.1 SQL injection / administrative credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with magicquotesgpc = Off\r\n\r\n; echo...

CPanel 11 Beta Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21287/info cPanel is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the...

NewsTraXor Website Management Script 2.9 beta Database Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10194/info Reportedly NewsTraXor is affected by a remote database disclosure vulnerability. This issue is due to a design error that allows the database file to be globally readable. This issue may allow a remote attacker...

Schoolhos CMS Beta 2.29 (index.php, id parameter) SQL Injection

No description provided by source. Exploit Title: Schoolhos CMS SQL Injetions Google Dork: intext:Schoolhos Free Open Source CMS Date: 22 Oktober 2012 Exploit Author: Cumi++ Vendor Homepage: http://schoolhos.com/ Version: Beta 2.29 Tested on: Ubuntu 12.04...

Microsoft Office (2010 beta) Communicator SIP Denial of Service Exploit

No description provided by source. ======================================================================================== | Title : Microsoft Office 2010 beta Communicator SIP denial of service Exploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested...

PrestaShop 1.1 admin/login.php PATH_INFO Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/32689/info PrestaShop is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Affiliate Market 0.1 BETA - (language) Local File Inclusion Vulnerability

No description provided by source. Affiliate Market Ver.0.1 BETA language Local File Include Vulnerability http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip /user/header.php?language=../../../../../../../../../../../etc/passwd I'm tryagi ..^|- milw0rm.com 2008-02-13...

Ledscripts LedForums Multiple Fileds HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8934/info It has been reported that LedForums is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the 'topmessage' and...

onenews beta 2 (xss/hi/sql) Multiple Vulnerabilities

No description provided by source. ///////////////\\\\\\\\ Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz : all DaRk-CodeRs guys, e.wiZz,...

PHP Ticket System Beta 1 (get_all_created_by_user.php, id param) - SQL Injection

No description provided by source. ============================================================== Title ...| PHP Ticket System SQL Injection Version .| BETA1.zip Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| http://sourceforge.net/projects/phpticketsystem/...

Re-Script 0.99 Beta (listings.php op) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...