CVE-2014-8954

Multiple cross-site scripting XSS vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Description fields in a playlist or the 3 filter parameter in an explore action to index.php...

CVE-2014-8954

Multiple cross-site scripting XSS vulnerabilities in phpSound 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Title or 2 Description fields in a playlist or the 3 filter parameter in an explore action to index.php...

CVE-2014-8954

CVE-2014-8954 affects phpSound up to version 1.0.5. The issue is multiple XSS vulnerabilities exploitable via (1) the Title field, (2) the Description field in playlists, or (3) the filter parameter in an explore action to index.php, enabling remote script/HTML injection. The OpenVAS entry corrob...

phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities

phpSound Music Sharing Platform 1.0.5 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: phpSound Music Sharing Platform Multiple XSS Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.5 Vendor Link:...

eYou v4 /storage_explore.php 命令执行漏洞

No description provided by source...

Twitter Vine app hacked by 16 year old Web developer

Recently Twitter has rolled out Vine app for Android, A new way to share video on twitter. The free app, which enables people to record and share clips of up to six seconds with other Vine users as well as on Twitter and Facebook. But on the very next day, Twitter's video-sharing application Vine...

CVE-2013-0474

The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test Platform Authentication credentials via a crafted web site...

CVE-2013-0474

The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test Platform Authentication credentials via a crafted web site...

PHP Dompdf File Remote File Inclusion

================================== PHP Dompdf File RFI Vulnerability ================================== +Title : PHP Dompdf File RFI Vulnerability +Software : Dompdf Php5 +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Web : http://alicoder.wordpress.com/ New...

CMS Tovar Site SQL Injection

================================================= CMS Tovar Site .ru SQL Injection Vulnerability ================================================= +Title : CMS Tovar Site .ru SQL Injection Vulnerability +Software : CMS Tovar +Vendor : NN +Download : NN +Author : josalijoe +Contact :...

PHP Bexfront SQL Injection

========================================== PHP Bexfront SQL Injection Vulnerability ========================================== +Title : PHP Bexfront SQL Injection Vulnerability +Software : PHP Bexfront +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Web :...

vBulletin Downloads FileInfo SQL Injection

=========================================== Vbulletin Downloads FileInfo SQL Injection =========================================== +Title : Vbulletin Downloads FileInfo SQL Injection +Software : FileInfo +Vendor : http://www.vbulletin.com +Download : http://www.vbulletin.com/download.php +Author ...

Mambo SMF 1.0.5 Remote File Inclusion

========================================================= Mambo Component comsmf 1.0.5 RFI Vulnerability ========================================================= +Title : Mambo Component comsmf 1.0.5 RFI Vulnerability +Software : SMF 1.0.5 +Vendor : http://mamboserver.com/ +Download :...

Joomla Flash Fun Local File Inclusion

========================================================= Joomla Component comjoomlaflashfun LFI Vulnerability ========================================================= +Title : Joomla Component comjoomlaflashfun LFI Vulnerability +Author : josalijoe +Contact : [email protected] +Home :...

NET ROM BUSINESS SRL SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ NET ROM BUSINESS SRL SQL Injection Vulnerability ================================================ Author: Pokeng Platform / Tested on: Win/Linux category: webapps/0day Dork :...

DotNetNuke 5 Event Calendar/Registration Sql Injection Vulnerability

Exploit for php platform in category web applications ==================================================================== DotNetNuke 5 Event Calendar/Registration Sql Injection Vulnerability ==================================================================== Author: Pokeng Software Link:...

ReadMore Systems CMS Sql Injection Vulnerability

Exploit for php platform in category web applications ================================================ ReadMore Systems CMS Sql Injection Vulnerability ================================================ Author: Pokeng Software Link: http://readmoresystems.com/index.php?id=1&switch=m buy $100 Platfo...

CommonSense CMS - SQL Injection

Exploit Title: CommonSense CMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.sensesites.com/ Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/article.php?articleid=SQL Dork : "Powered by CommonSense CMS" Greetz Explore Crew : ArRay yuda N4ck0 K4pt3N...

Joomla! Component com_g2bridge - Local File Inclusion

Exploit Title: Joomla Component comg2bridge LFI vulnerability Date: May 30th, 2010 Author: akatsuchi Explore Crew [email protected] Platform / Tested on: CentOS release 4.8 Final category: webaps...

Netjuke 1.0-rc2 - sql injection & XSS

The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all the MP3, Ogg Vorbis and other format files that constitute your digital music collection. Supports images, language packs, multi-level security, random playlists, etc http://sourceforge.net/projects/netjuke...