Family CMS 2.9 and earlier multiple Vulnerabilities

1- CSRF缺陷 : 利用的POC如下： POC 1: Page "familynews.php" function autosubmit document.getElementById'ChangeSubmit'.submit; POC 2:页面 "prayers.php" function autosubmit document.getElementById'ChangeSubmit'.submit; input type="hidden" name="desc" value="testtes...

Family CMS 2.9 and earlier multiple Vulnerabilities

Exploit for php platform in category web applications Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 - Multiple Vulnerabilities Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family CMS 2.9 Cross Site Scripting / Cross Site Request Forgery

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Family Connections <= 2.1.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Family Connections = 2.1.3 Multiple Remote Vulnerabilities =========================================================== Family Connections = 2.1.3 Multiple Remote Vulnerabilities...

Family Connections 1.8.2 Arbitrary File Upload

Salvatore "drosophila" Fresta + Application: Family Connection + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Arbitrary File Upload + Exploitation: Remote + Date: 3 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...