Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting

Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post your XSS as tag. I used alert'xss' You will have to use a proxy /...

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post you...

Vanilla Forums About Me Plugin Persistant XSS

Exploit for php platform in category web applications Title: Vanilla About Me Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + About Me 1.1.1...

Vanilla Forums About Me Plugin - Persistent Cross-Site Scripting

Vanilla Forums About Me Plugin - Persistent Cross-Site Scripting Title: Vanilla About Me Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + About Me 1.1.1...

Vanilla FirstLastNames 1.3.2 Plugin - Persistent Cross-Site Scripting

Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + FirstLastNames 1.3.2 http://vanillaforums.org/addon/firstlastnames-plugin...

Vanilla Forums About Me Plugin - Persistent Cross-Site Scripting

Title: Vanilla About Me Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + About Me 1.1.1 http://vanillaforums.org/addon/aboutme-plugin http://http://vanillaforums.org Go to...

Vanilla Latest Comment 1.1 Cross Site Scripting

Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1 http://vanillaforums.org/addon/latestcomment-plugin http://vanillaforums.or...

Vanilla FirstLastNames 1.3.2 Cross Site Scripting

Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + FirstLastNames 1.3.2 http://vanillaforums.org/addon/firstlastnames-plugin...

Vanilla Forums LatestComment 1.1 Plugin Persistent XSS

Exploit for php platform in category web applications Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1...

Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting

Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1...

Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting

Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1 http://vanillaforums.org/addon/latestcomment-plugin http://vanillaforums.or...

Vanilla Forums 2.0.17.9 LFI

Local file include vulnerability in Vanilla Forums p parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

ASP-DEv XM Forums SQL Injection

Exploit Title : ASP-DEv XM Forums SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Software Link : http://www.asp-dev.com/download.asp?did=1 Contact : [email protected] , [email protected] Security Ri...

Al-Qaeda websites hacked and remains down for past 12 days

Al-Qaeda websites hacked and remains down for past 12 days Al-Qaeda's main internet forums have been offline for the past 12 days in the longest sustained outages of the sites since they began operating. Several online forums frequently visited by al-Qaeda operatives were downed over the course o...

Vargonen Forums SQL Injection

Exploit Title: Vargonen Forums SQL Injection Vulnerability Date: 01/03/2012 Author: 3spi0n Software Website: http://vargonen.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Article.php $ Demo ; www.yuzuklerinefendisi.com/article.php?sid=2120' MySQLi Dar bi Koridor...

eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Voy Forums Cross Site Scripting

Exploit Title: Voy Forums Cross Site Scripting Date: 29.01.2012 Author: Sony Software Link: http://www.voy.com Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/voy-forums-cross-site-scripting.html...

Motigo Forums/Calendar/Guestbook Cross Site Scripting

Exploit Title: Motigo Forums/Calendar/Guestbook Cross Site Scripting Date: 28.01.2012 Author: Sony Software Link: http://motigo.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/motigo-forumscalendarguestbook-cross.html...

Aimoo Forums Cross Site Scripting

Exploit Title: Aimoo Forums Cross Site Scripting Date: 25.01.2012 Author: Sony Software Link: http://www.aimoo.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/aimoo-forums-cross-site-scripting.html...

Yuku Forums Cross Site Scripting

Exploit Title: Yuku Forums Cross Site Scripting Date: 24.01.2012 Author: Sony Software Link: http://www.yuku.com/ Google Dorks: inurl:.yuku.com intext:forum Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/yuku-forums-cross-site-scripting.htm...