Pixelpost 1.4.3 User Comment HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16362/info Pixelpost is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Diigo Toolbar and Diigolet Comment Feature - HTML Injection and Information Disclosure Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29611/info Diigo Toolbar and Diigolet are prone to an HTML-injection vulnerability and an information-disclosure vulnerability when handling data via the 'comment' feature. An attacker can exploit the HTML-injection issue...

Comment IT 0.2 PathToComment Parameter Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20739/info Comment IT is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...

telepark wiki 2.4.23 - Multiple Vulnerabilities

No description provided by source. Abysssec Inc Public Advisory Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version : = v2.4.23 Vendor Site : www.teamtodo.com Discovery : www.Abysssec.com Vendor contact : 8 november Vendor response : 9 november patch is available in vendor...

Wordpress W3 Total Cache PHP Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

e107 0.7.5 Subject field HTML injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18560/info The e107 CMS is prone to an HTML-injection vulnerability. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site whe...

MPCS <= 1.0 (path) Remote File Include Vulnerabilities

No description provided by source. ================================================================== Multi-Page Comment System RFI ================================================================== Info:- Scripts: Multi-Page Comment System MPCS Home: http://tpvgames.co.uk/web/mpcs/ Download:...

Netscape Communicator 4.x JPEG-Comment Heap Overwrite Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to process these comments...

Joomla Component ZiMB Comment com_zimbcomment Local File Inclusion Vulnerability

No description provided by source. ================================================================================================================= o Joomla Component ZiMB Comment Local File Inclusion Vulnerability Software : comzimbcomment version 0.8.1 Vendor : http://www.zimbllc.com/ Author :...

Wordpress Comment Rating Plugin 2.9.32 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Wordpress plugin: Comment Rating SQL injection Google Dork: Date: 21/02/2013 Exploit Author: ebanyu Url Author: www.ebanyu.com.ar Vendor Homepage: wealthynetizen.com Software Link: http://wealthynetizen.com/wordpress-plugin-comment-rating/ Version...

Anchor CMS 0.9.1 - Stored XSS Vulnerability

No description provided by source. Exploit Title : AnchorCMS Stored XSS exploit v0.9.1 Exploit Author: DURAKIBOX / dn5 Website : halisduraki.com Email : [email protected] Date : 18.7.2013. CMS uri : http://anchorcms.com/ Version : AnchorCMS = 0.9.1 About the CMS Anchor is a super-simple, lightweigh...

flatpress 0.909.1 - Stored XSS vulnerability

No description provided by source. Title: FlatPress 0.909.1 Stored XSS Vendor: http://www.flatpress.org Dork: powered by FlatPress AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

Ez Blog 1.0 - XSS/CSRF Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Blog XSS/XSRF Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Simple PHP Blog <= 0.4.0 - Remote Command Execution

No description provided by source. $Id: sphpblogfileupload.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

ASPNuke <= 0.80 (comment_post.asp) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w SQL Injection Exploit for ASPNuke = 0.80 This exploit retrieve the username of the administrator of the board and his password crypted in SHA256 Related advisory: http://www.securityfocus.com/archive/1/403479/30/0/threaded Discovered and Coded ...

Netscape Navigator 4.0.8 'about:' Domain Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2637/info Due to a flaw in Navigator's security code, all URLs in the about: protocol are considered to be part of the same domain. If arbitrary Javascript code is placed in a GIF's comment field, it is treated like a...

phpok存储型xss一枚

简要描述： rt 详细说明： PHPOK4.0.556 漏了评论处的 编码转换。 $content = $this-get"content",'html'; type为 html的话 case 'html':$msg = pregreplace$tmp,'',$msg;break; 只过滤了 $tmp = array"//isU","//isU","//isU","//isU","//isU","//isU","//isU","//isU"; 太弱。 审核评论 alert 可获取 浏览该商品的 用户的cookie 以及后台审核时 管理员的 cookie 漏洞证明：...

NIST Seeking Public Comment on SHA-3 Crypto Algorithm

The National Institute of Standards and Technology NIST is inviting the public to analyze and comment on its Secure Hash Algorithm-3 SHA-3, the latest iteration of cryptographic hash functions endorsed and published by the U.S. standards agency in order to protect the integrity of electronic...

Srun3000命令执行第5弹

简要描述： 第5弹 详细说明： 这回是post的命令执行而且需要注释掉后面的参数。 if $POST'act' == "auth" $command = "/srun3/radius/bin/radtest ".trim $POST'uname' ." ".trim $POST'pass' ." ".$array'serverip'." 10 ".$array'secret'; //后面注释掉就好 if $fp = popen $command, "r" //这里 $con = fread $fp, 10240 ; pclose $fp ; 漏洞证明：...

Vulnerability in Yahoo Websites Allows Hackers to Delete Any Comment

Two months ago, we reported a critical vulnerability on the Yahoo Answers platform that allowed a hacker to delete all the posted thread and comments from Yahoo's Suggestion Board website. Recently, a similar vulnerability has been reported by another Egyptian security researcher 'Ahmed Aboul-Ela...