BusinessWiki 2.5 RC3 XSS / File Upload

!/usr/bin/python ''' Exploit Title: Stored XSS & Arbitrary File Upload Vulnerabilities in BusinessWiki. Date: 23/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://onbusinesswiki.com/ Software Link: http://sourceforge.net/projects/businesswiki/files/ Version: 2.5RC3 Gr33Tz:...

WordPress SEM WYSIWYG Arbitrary File Upload

Exploit Title: Wordpress sem WYSIWYG Arbitrary File Upload Vulnerability Google Dork: inurl:wp-content/plugins/sem-wysiwyg/ Date: 08/22/2012 Author: Crim3R Tested on: all ================================== D3m0:...

[SECURITY] [DSA 2522-1] fckeditor security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2522-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez August 05, 2012 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-2522-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2522-1 (fckeditor)

The remote host is missing an update to fckeditor announced via advisory DSA 2522-1. OpenVAS Vulnerability Test $Id: deb25221.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2522-1 fckeditor Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Debian DSA-2522-1 : fckeditor - XSS

Emilio Pinna discovered a cross site scripting vulnerability in the spellchecker.php page of FCKeditor, a popular HTML/DHTML editor for the web. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

[SECURITY] [DSA 2522-1] fckeditor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2522-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez August 05, 2012 http://www.debian.org/security/faq -...

DSA-2522-1 fckeditor - cross site scripting

Bulletin has no description...

WordPress Chenpress Shell Upload

Exploit Title : Wordpress chenpress Plugin Arbitrary File Upload Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://wordpress.org Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

CVE-2012-4000

Cross-site scripting XSS vulnerability in the printtextinputsvar function in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters...

Cross site scripting

Cross-site scripting XSS vulnerability in the printtextinputsvar function in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters...

CVE-2012-4000

Cross-site scripting XSS vulnerability in the printtextinputsvar function in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters...

CVE-2012-4000

Cross-site scripting XSS vulnerability in the printtextinputsvar function in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters...

CVE-2012-4000

CVE-2012-4000 is a cross-site scripting vulnerability in the FCKeditor spellchecker PHP path. The issue affects FCKeditor 2.6.7 and earlier, where the print_textinputs_var function processes the textinputs[] parameters in spellchecker.php, allowing a remote attacker to inject arbitrary script/HTM...

CVE-2012-4000: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the printtextinputsvar function in editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php in FCKeditor 2.6.7 and earlier allows remote attackers to inject arbitrary web script or HTML via textinputs array parameters...

FCKEditor Core - 'Editor 'spellchecker.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting

FCKEditor Core - Editor spellchecker.php Cross-Site Scripting source: https://www.securityfocus.com/bid/54188/info FCKEditor is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

fckeditor 2.2 upload.php PHP环境下任意文件上传漏洞

No description provided by source...

fckeditor 2.4.3 upload.php PHP环境下任意文件上传漏洞

No description provided by source...

Havalite CMS v1.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications Title: ====== Havalite CMS v1.0.4 - Multiple Web Vulnerabilities Date: ===== 2012-04-23 Introduction: ============= Havalite, a lightweight, open source CMS, based on php and SQLite. It\\\'s licensed under the GNU General Public License. - A...