263 matches found
b2evolution 'filemanager' cross-site scripting vulnerability
b2evolution is a PHP and MySQL based blogging software developed by software developer Francois Planque. A cross-site scripting vulnerability exists in b2evolution 'filemanager'. The blogs/admin.php script fails to adequately filter the 'fmfilter' parameter. A remote attacker can exploit the...
MyBB Profile Blogs Plugin SQL Injection
An SQL injection vulnerability has been reported in MyBB Profile Blogs Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WPScan Vulnerability Database WordPress Security Resource
WordPress’ popularity as a content management system 44 percent of CMS market share is matched in parallel by the number of security vulnerabilities afflicting the open source platform, as well as its versatile plug-ins and themes. It’s not unlikely that a developer may be at a loss as to the...
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities
No description provided by source. Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:Profile Blogs for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version:...
geoBlog MOD_1.0 deleteblog.php id Variable Remote Arbitrary Blog Deletion
No description provided by source. source: http://www.securityfocus.com/bid/24966/info geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments. An attacker may exploit these issues to delete blogs...
pointter php content management system 1.2 - Multiple Vulnerabilities
No description provided by source. Pointter PHP Content Management System 1.2 Multiple Vulnerabilities Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast and user friendly CMS script that ca...
Blogs manager <= 1.101 SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Blogs manager = 1.101 SQL Injection Vulnerability ------------------------------------------------------------------------ author............: muuratsalo Revshell.com contact...........:...
Apple Safari 2.0.4 Cross-Domain Browser Location Information Disclosure Vulnerability
source: http://www.securityfocus.com/bid/24121/info Apple Safari is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain JavaScript restrictions. Exploiting this issue may allow attackers to access locations that a user visits, even if it's in a...
Disqus Wordpress Plugin Flaw Leaves Millions of Blogs Vulnerable to Hackers
A Remote code execution RCE vulnerability has been discovered in the comment and discussion service, Disqus plugin for the most popular Blogging Platform Wordpress. While there are more than 70 million websites on the Internet currently running WordPress, about 1.3 million of them use the ‘Disqus...
CVE-2013-2945
CVE-2013-2945 is a SQL injection vulnerability in blogs/admin.php of b2evolution before 4.1.7. The flaw enables remote authenticated administrators to execute arbitrary SQL commands via the show_statuses[] parameter; note that this can be leveraged with CSRF to allow remote unauthenticated attack...
Phabricator: UnAuthorized Editorial Publishing to Blogs
Hi All, Please see the attached file. Thanks in advance Mark Litchfield...
DDoS Attacks originated from thousands of .EDU and .GOV WordPress Blogs
None...
Financial Times hacked by Syrian Electronic Army
The Financial Times has become the latest news outlet to be hacked by supporters of the Syrian president Bashar al-Assad, following a phishing attack on the company's email accounts. The posh broadsheet's Tech Blog - at https://blogs.FT.com/beyond-brics was compromised to run stories headlined...
UBUNTU-CVE-2012-6104
blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed...
CVE-2012-6104
blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed...
MyBB Profile Blogs Plugin 1.2 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link:...
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities
Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version: 1.2+ Tested on: Linux. MyBB Profi...
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities
MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link:...
MyBB Profile Blogs 1.2 Cross Site Scripting / SQL Injection
Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version: 1.2+ Tested on: Linux. MyBB Profi...
