Multiple XSS Vulnerabilities in ZZCMS 7.2

ZZCMS is an enterprise website builder. ZZCMS 7.2 suffers from an XSS vulnerability in the /inc/top.php page and the Uploadimgform.php page. An attacker can exploit the vulnerability to inject arbitrary Web script or HTML...

CVE-2016-1488

Cross-site scripting XSS vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

GLPI Elevation of Privilege Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A security vulnerability exists in GLPI 0.85.2 and earlier versions. The...

PHPJabbers Property Listing Script 2.0 - Cross-Site Request Forgery (Add Admin)

Property Listing Script V2.0 - Add Admin CSRF Vulnerability ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/property-listing-script/ === Exploit ===...

idev-VacationRentals 1.0 CSRF Vulnerability

Exploit for php platform in category web applications Application Name : idev-VacationRentals 1.0 Vulnerable Type : CSRF Demo : http://idevspot.com/demos/idev-vacationrentals/admin Author : Jonturk75 Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowHide 0day.today 2018-01-02...

idev-GameSite 1.0 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: idev-GameSite 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-gamesite/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-01-01...

ZShare Embedder CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: ZShare Embedder CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/zshare-embeddergrabber-scriptacula/27263/ Category:: webapps Demo : http://demo.phpmymovie.com/siteadmin/ Greetz: Inj3ct0r Exploit...

Phonora Photo Gallery CSRF

Exploit for php platform in category web applications Exploit Title: Phonora Photo Gallery CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/phonora-photo-gallery/27420/ Category:: webapps Demo : http://www.parallelex.com/phonora/demo/photogallery/ Greetz: Inj3ct0r...

Izlebizi Video Script Add Admin Account Exploit

Exploit for php platform in category web applications Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm ZoRLu member from Inj3ct0r Team 1 1...

BoutikOne Multiple SQL Injections

BoutikOne - Multiples SQL Injection Vulnerability RELEASE DATE : 13.03.2011 by Alz categorie.php Var : http://target/categories.php?path=sqli - list.php Var : http://target/list.php?path=sqli - description.php Var : http://target/description.php?id=sqli - description.php Var :...

BoutikOne Multiples SQL Injection Vulnerability

BoutikOne - Multiples SQL Injection Vulnerability RELEASE DATE : 13.03.2011 by Alz cdxdotsecurityatgmaildotcom - Google Dork: "Powered by BoutikOne" - categorie.php Var path : http://target/categories.php?path=sqli - list.php Var path : http://target/list.php?path=sqli - description.php Var id :...

cPanel 11.x - Cross-Site Request Forgery (Edit E-mail)

cPanel 11.x - Cross-Site Request Forgery Edit E-mail Exploit Title: Cpanel 11.X Edit E-mail Cross Site Request Forgery exploit Date: 22 - 10 - 2010 Author: Mon7rF Mail : [email protected] Tested on: Windows 7 --------------------------------------------------------------------------------------...

CVE-2010-3694

Cross-site request forgery CSRF vulnerability in the Horde Application Framework before 3.3.9 allows remote attackers to hijack the authentication of unspecified victims for requests to a preference form...

Wind news site management system any changes to password vulnerabilities-vulnerability warning-the black bar safety net

FoosunCMS is a powerful feature of based on ASP+ACCESS/MSSQL architecture of content management software. Vulnerability analysis: In the file\User\ GetPassword. asp: ElseIf Request. Form"Action" = "step3" then //first 2 Line 8 Call step3 ...... Sub step3 //the 1 9 8 row Dim ppassnew,pconfimpassne...

Prediction League 0.3.8 - Cross-Site Request Forgery (Add Admin)

Prediction League 0.3.8 - Cross-Site Request Forgery Add Admin ======================================================================================== | Title : Prediction League 0.3.8 CSRF Create Admin User Exploit | Author : indoushka | Home : www.iqs3cur1ty.com/vb | Tested on: Lunix Français...

Messages Library 2.0 Arbitrary Administrator Account Vulnerability

No description provided by source. head titleThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account /title base target="left" link rel="stylesheet" href="style.css" /head form method="POST" action="http://path/sms/admin/mod.php?Action=Add" table border="0" cellpadding="0" cellspacing="0"...

Getacoder clone (sb_protype) Remote SQL Injection Vulnerability

No description provided by source. || | | Getacoder Clone Script sbprotype Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Repair Online v1.2 (sentout) Create Admin Vulnerability

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Repair Online v1.2 sentout Create Admin...

CGI RESCUE WebFORM vulnerable to cross-site scripting

Overview WebFORM, released from CGI RESCUE, is a CGI script written in perl that allows a user to send email messages via a HTML form. WebFORM contains a cross-site scripting vulnerability. Impact An abitrary script may be executed on the user's web browser. Solution None...

CGI RESCUE WebFORM allows unauthorized email transmission

Overview WebFORM from CGI RESCUE is software which delivers the HTML form inputs via email. WebFORM fails to check the mail headers properly, allowing a remote attacker to send email to arbitrary addresses. According to the vendor's information, FORM2MAIL also contains a similar vulnerability, an...