WordPress WP-Affiliate Platform Cross Site Scripting

Wordpress XSS/HTML Injection in Plugin wp-affiliate-platform + Date: 30/04/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: http://wpaffiliatemanager.com/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: login.php +...

WordPress Echelon Theme Shell Upload

Exploit Author:Th3 R0cksT3r Exploit Title: WordPress Echelon Theme Shell Upload Date: 25.04.2014 Email: [email protected] Vendor Homepage: http://wordpress.org/ Google Dork: inurl:/wp-content/themes/echelon/ Exploit : ========== "@$uploadfile"; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1;...

Netgear N600 Password Disclosure / Account Reset

Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS DUAL BAND WNDR3400 Firmware Version: Firmware Version 1.0.0.38 AND...

NETGEAR WNDR3400 N600 Wireless Dual Band - Multiple Vulnerabilities

NETGEAR WNDR3400 N600 Wireless Dual Band - Multiple Vulnerabilities Title: Multiple vulnerabilities in NETGEAR N600 WIRELESS DUAL BAND WNDR3400 ==================================================================================== Notification Date: 4/14/2014 Affected Vendor: NETGEAR N600 WIRELESS...

csUpload Script Site - Authentication Bypass

Exploit Title: "csUpload Script Site" Authentication Bypass Google Dork: CSUpload.cgi?command= Date: 4/9/2014 Exploit Author: Satanic2000 Vendor Homepage: http://www.cgiscript.net Software Link: http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=12 Version:...

csUpload Script Site - Authentication Bypass

csUpload Script Site - Authentication Bypass Exploit Title: "csUpload Script Site" Authentication Bypass Google Dork: CSUpload.cgi?command= Date: 4/9/2014 Exploit Author: Satanic2000 Vendor Homepage: http://www.cgiscript.net Software Link:...

ICOMM 610 Wireless Modem - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title : ICOMM 610 Wireless Modem CSRF Vulnerability Google dork : N/A Date : 02/04/2014 Exploit Author : Blessen Thomas Vendor Homepage : http://www.icommtele.com/ Software Link : N/A Version : ICOMM 610 Tested on : Device softwar...

Horde Webmail 5.1 - Open Redirect Vulnerability

Exploit for php platform in category web applications + Horde webmail - Open Redirect Vulnerability + Date: 31/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.horde.org/apps/webmail + Contact: email protected + Tested on: Windows 7 and Linux +...

Wordpress Templatic Themes CSRF File Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Templatic Themes CSRF File Upload Vulnerability Monetize Uploader Author : Jje Incovers Date : 31/03/2014 Category : Web Applications Type : PHP Vendor : http://templatic.com/ Download :...

plexusCMS 0.5 - Cross-Site Scripting Remote Shell Credentials Leak

plexusCMS 0.5 - Cross-Site Scripting Remote Shell Credentials Leak Exploit Title: plexusCMS 0.5 XSS Remote Shell Exploit Google Dork: allinurl: plx-storage Date: 22.02.2013 Exploit Author: neglomaniac Vendor Homepage: http://plexus-cms.org/ Version: 0.5 --- FILES backdoor.php simple commend execu...

Kemana Directory 1.5.6 Local File Inclusion Vulnerability

Kemana Directory version 1.5.6 suffers from a local file inclusion vulnerability. Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana...

Kemana Directory 1.5.6 Database Backup Disclosure Vulnerability

Kemana Directory version 1.5.6 suffers from a database backup disclosure vulnerability. ?php / Kemana Directory 1.5.6 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with...

Kemana Directory 1.5.6 Password Hash Disclosure

Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosure Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's...

Kemana Directory 1.5.6 Local File Inclusion

Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features...

Kemana Directory 1.5.6 - qvc_init() Cookie Poisoning CAPTCHA Bypass

Kemana Directory 1.5.6 - qvcinit Cookie Poisoning CAPTCHA Bypass !C:\Perl64\bin\perl.exe Kemana Directory 1.5.6 qvcinit Cookie Poisoning CAPTCHA Bypass Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution...

Kemana Directory 1.5.6 Database Backup Disclosure

$total return; ifempty$starttime $starttime=time; $n...

Kemana Directory 1.5.6 - task.php Local File Inclusion

Kemana Directory 1.5.6 - task.php Local File Inclusion Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or...

Cart Engine 3.0.0 - Remote Code Execution

Cart Engine 3.0.0 Remote Code Execution Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of Cart Engine include:...

Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure

Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosure Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's...

Kemana Directory 1.5.6 - kemana_admin_passwd Cookie User Password Hash Disclosure

Kemana Directory 1.5.6 - kemanaadminpasswd Cookie User Password Hash Disclosure Kemana Directory 1.5.6 kemanaadminpasswd Cookie User Password Hash Disclosure Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with...