CVE-2010-3028

The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions 777 in unspecified folders, which allows local users to modify, create, or delete certain files...

Zomplog 3.9 - Cross-Site Scripting Cross-Site Request Forgery

Zomplog 3.9 - Cross-Site Scripting Cross-Site Request Forgery Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF...

MYBB 1.6 (admin/index.php) XSS Vulnerabilities

Exploit for php platform in category web applications ============================================== MYBB 1.6 admin/index.php XSS Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Zomplog 3.9 - Cross-Site Scripting / Cross-Site Request Forgery

Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities - Change Admin Password input type="hidden"...

EZ-Oscommerce 3.1 Cross Site Request Forgery / Shell Upload

==================================================== EZ-Oscommerce 3.1 Remote File Upload EZ-Oscommerce 3.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Directory traversal

Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful mlmmj 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. dot d...

CVE-2009-4896

Multiple directory traversal vulnerabilities in the mlmmj-php-admin web interface for Mailing List Managing Made Joyful mlmmj 1.2.15 through 1.2.17 allow remote authenticated users to overwrite, create, or delete arbitrary files, or determine the existence of arbitrary directories, via a .. dot d...

CVE-2009-4953

Cross-site scripting XSS vulnerability in the Userdata Create/Edit sguserdata extension before 0.91.0 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4953

TYPO3 sg_userdata (Userdata Create/Edit) extension vulnerable to Cross-site Scripting (XSS) in versions before 0.91.0. The issue permits injection of arbitrary script/HTML via unspecified vectors; CVSSv2 base score 4.3 (Medium). Remediation per TYPO3 security bulletin TYPO3-SA-2009-005 is to upda...

Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ================================================================================ Easy FTP Server v1.7.0.11 MKD Command Remote Buffer Overflow Exploit Post Auth ================================================================================...

EasyFTP Server 1.7.0.11 - 'MKD' (Authenticated) Remote Buffer Overflow

!/usr/bin/python import socket,sys Tested on XP Pro SP2 Eng and XP Pro SP3 Eng print """ Easy FTP Server v1.7.0.11 MKD Remote BoF Exploit Post Authentication Author / Discovered by : Karn Ganeshen Date : July 5, 2010 KarnGaneshen aT gmail d0t com http://ipositivesecurity.blogspot.com """ if...

Zenphoto CMS 1.3 Cross Site Request Forgery

Date: Wed 14 Jul 2010 12:48:56 PM EEST Vendor: http://www.zenphoto.org/ Download: http://zenphoto.googlecode.com/files/zenphoto-1.3.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Zenphoto CMS 1.3 Multiple CSRF Vulnerabilities - Change Admin Password input type="hidd...

ZenPhoto CMS 1.3 - Multiple Cross-Site Request Forgery Vulnerabilities

ZenPhoto CMS 1.3 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Wed 14 Jul 2010 12:48:56 PM EEST Vendor: http://www.zenphoto.org/ Download: http://zenphoto.googlecode.com/files/zenphoto-1.3.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Zenphoto CMS 1.3 Multiple CSRF...

ZenPhoto CMS 1.3 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Wed 14 Jul 2010 12:48:56 PM EEST Vendor: http://www.zenphoto.org/ Download: http://zenphoto.googlecode.com/files/zenphoto-1.3.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Zenphoto CMS 1.3 Multiple CSRF Vulnerabilities - Change Admin Password input type="...

TheHostingTool 1.2.2 Cross Site Request Forgery

Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Create Staff Account =- TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities - Create Staff Account -= CSRF PoC 2 - Delete Staff Account ...

Grafik CMS 1.1.2 Cross Site Request Forgery

Date: Mon 12 Jul 2010 07:07:22 PM EEST Vendor: http://www.grafik-power.com/grafikcms/ Download: None --- -= CSRF PoC 1 - Change Admin Password =- Grafik CMS 1.1.2 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User =- Grafik CMS 1.1.2 Multiple CSRF...

TomatoCart 1.0.1 Cross Site Request Forgery

Date: Sun 11 Jul 2010 05:01:51 PM EEST Vendor: http://www.tomatocart.com/ Download: http://www.tomatocart.com/component/extensionmanage/?task=downloadfiles&file=tomatocart-1.0.1.zip --- -= CSRF PoC 1 - Create Admin User =- TomatoCart 1.0.1 Multiple CSRF Vulnerabilities - Create Admin User -= CSRF...

TomatoCMS 2.0.5 Cross Site Request Forgery

Date: Sun 11 Jul 2010 03:36:08 PM EEST Vendor: http://www.tomatocms.com/ Download: None --- -= CSRF PoC 1 - Change Administrator Password =- TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User =- TomatoCMS 2.0.5 Multiple CSRF Vulnerabilities -...

Campsite CMS 3.4.0 Cross Site Request Forgery

Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download: http://sourceforge.net/projects/campsite/files/campsite/3.4.0/campsite-3.4.0.tar.gz/download --- -= CSRF PoC 1 - Create Admin User =- Campsite CMS 3.4.0 Multiple CSRF...

TheHostingTool 1.2.2 - Multiple Cross-Site Request Forgery Vulnerabilities

TheHostingTool 1.2.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Create Staff Account =- TheHostingTool 1.2.2 Multiple CSRF...