Family CMS 2.9 and earlier multiple Vulnerabilities

1- CSRF缺陷 : 利用的POC如下： POC 1: Page "familynews.php" function autosubmit document.getElementById'ChangeSubmit'.submit; POC 2:页面 "prayers.php" function autosubmit document.getElementById'ChangeSubmit'.submit; input type="hidden" name="desc" value="testtes...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 - Multiple Vulnerabilities Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family CMS 2.9 Cross Site Scripting / Cross Site Request Forgery

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family CMS 2.9 and earlier multiple Vulnerabilities

Exploit for php platform in category web applications Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family Connections <= 2.1.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Family Connections = 2.1.3 Multiple Remote Vulnerabilities =========================================================== Family Connections = 2.1.3 Multiple Remote Vulnerabilities...

Family Connections 1.8.2 Arbitrary File Upload

Salvatore "drosophila" Fresta + Application: Family Connection + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Arbitrary File Upload + Exploitation: Remote + Date: 3 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...