CiviCRM 3.1 < Beta 5 Multiple XSS Vulnerabilities

Exploit for unknown platform in category web applications ================================================= CiviCRM 3.1 and from being in the same input box. In several cases it is possible to use multiple input boxes that get displayed later either together or close enough that it is possible to...

CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities

CiviCRM 3.1 Beta 5 - Multiple Cross-Site Scripting Vulnerabilities Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input...

CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities

Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...

REMOTE EXPLOIT IN ALL CURRENT VERSIONS OF BIG BROTHER

/ Big Brother Exploit For ALL Versions prior to v.1.4h Desc: View the contents of any file on the remote system. Including /etc/passwd or /etc/shadow Contributions: Identified and Proof of Concept by Safety and Loki LoA Greets and shouts to: RootHat, Lammie The Infamous Lamagra! We know wuftpd wa...

Solution Scripts Home Free 1.0 - 'search.cgi' Directory Traversal

source: https://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which can be any text string. The supplied argument can contain the...

Solution Scripts Home Free 1.0 - search.cgi Directory Traversal

Solution Scripts Home Free 1.0 - search.cgi Directory Traversal source: https://www.securityfocus.com/bid/921/info Home Free is a suite of Perl cgi scripts that allow a website to support user contributions of various types. One of the scripts, search.cgi, accepts a parameter called letter which...