3346 matches found
CVE-2010-0367
Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers to execute arbitrary PHP code via a URL in the rowptemtemplate parameter to 1 showcasesearch.php and 2 showcase2search.php...
Serialsystem 1.0.4 Beta - 'list' Cross-Site Scripting
source: https://www.securityfocus.com/bid/40236/info Serialsystem is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
Bits Video Script 2.04/2.05 - '/addvideo.php' Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/40712/info Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the...
Bits Video Script 2.05 Gold Beta - showcasesearch.php?rowptem[template] Remote File Inclusion
Bits Video Script 2.05 Gold Beta - showcasesearch.php?rowptemtemplate Remote File Inclusion source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...
Nemesis Player (NSP) Local Denial of Service (DoS) Vulnerability
Exploit for unknown platform in category dos / poc ================================================================ Nemesis Player NSP Local Denial of Service DoS Vulnerability ================================================================ !/usr/bin/perl Exploit Title: Nemesis Player NSP Local...
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...
SNadd Beta Cross Site Request Forgery
Discovered by : Septemb0x + Script Name : SNadd Beta + Download Script : http://www.phpexplorer.com/goster/1191 + Bug Description : New article can be added Exploit Codes : Baþlýk: Yazý: " name="ekle" + Greetz : BARCOD3 - Bhdr - Phreaker - Nizam-ul Mülk - Türkeþhan - SenqRonize... All Friends...
pL-PHP 0.9 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/37593/info pL-PHP is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...
pL-PHP Beta 0.9 Cross Site Scripting
======================================================================================== | Title : pL-PHP beta 0.9 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found ...
Upload-Point 1.6 Beta Shell Upload
======================================================================================== $ | Title : Upload-Point 1.6 Beta pload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : | |...
jgbbs-3.0beta1 DB Download Vulnerability
No description provided by source. ======================================================================================== | Title : Asp jgbbs-3.0beta1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...
Upload-Point 1.6 Beta Upload Shell Vulnerability
Exploit for unknown platform in category web applications ================================================ Upload-Point 1.6 Beta Upload Shell Vulnerability ================================================ ======================================================================================== $ |...
Upload-Point 1.6 Beta - Arbitrary File Upload
======================================================================================== $ | Title : Upload-Point 1.6 Beta pload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : 106...
Social Web CMS <= Beta 2 Multiple Vulnerabilities
No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com/ Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...
Social Web CMS <= Beta 2 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================= Social Web CMS Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friend...
social Web CMS Beta 2 - Multiple Vulnerabilities
social Web CMS Beta 2 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...
[SECURITY] Fedora 11 Update: Miro-2.5.2-7.fc11
Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...
Pluxml-Blog Beta 4.2 XSS
Script Name : Pluxml-blog Version : Pluxml-blog bêta 4.2 Bug Type : XSS vulnerability Found by : Metropolis Discovered : 17 December 2009 Download app : http://telechargements.pluxml.org/pluxml-blog-beta4-2.zip PoC : http://target/path/core/admin/auth.php?p=1Xss example :...
Piwik Open Flash Chart Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ========================================================== Piwik Open Flash Chart Remote Code Execution Vulnerability ========================================================== Class: Input Validation Error CVE: Remote: Yes Local: No...
TenderSystem 0.9.5 Beta Local File Inclusion
. . \ \ | | / | | / / || | | /\ \ / | |/ // \ / |/ \ \ \ | \ | | / \ | | \ | \ |\ /| || / / / / / / / / / ------------------------------------------------------------------------------------------- Note: TESTED LOCALLY WITH XAMPP FOR WINDOWS I was unable to get this to work on a...