Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting

Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1...

Vanilla Forums LatestComment 1.1 Plugin - Persistent Cross-Site Scripting

Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1 http://vanillaforums.org/addon/latestcomment-plugin http://vanillaforums.or...

Vanilla Forums LatestComment 1.1 Plugin Persistent XSS

Exploit for php platform in category web applications Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1...

Vanilla Forums 2.0.17.9 LFI

Local file include vulnerability in Vanilla Forums p parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

ASP-DEv XM Forums SQL Injection

Exploit Title : ASP-DEv XM Forums SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Software Link : http://www.asp-dev.com/download.asp?did=1 Contact : [email protected] , [email protected] Security Ri...

Al-Qaeda websites hacked and remains down for past 12 days

Al-Qaeda websites hacked and remains down for past 12 days Al-Qaeda's main internet forums have been offline for the past 12 days in the longest sustained outages of the sites since they began operating. Several online forums frequently visited by al-Qaeda operatives were downed over the course o...

Vargonen Forums SQL Injection

Exploit Title: Vargonen Forums SQL Injection Vulnerability Date: 01/03/2012 Author: 3spi0n Software Website: http://vargonen.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Article.php $ Demo ; www.yuzuklerinefendisi.com/article.php?sid=2120' MySQLi Dar bi Koridor...

eFront Community++ v3.6.10 - Multiple Web Vulnerabilities

Document Title: =============== eFront Community++ v3.6.10 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=421 Release Date: ============= 2012-02-09 Vulnerability Laboratory ID VL-ID: ==================================== 4...

Voy Forums Cross Site Scripting

Exploit Title: Voy Forums Cross Site Scripting Date: 29.01.2012 Author: Sony Software Link: http://www.voy.com Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/voy-forums-cross-site-scripting.html...

Motigo Forums/Calendar/Guestbook Cross Site Scripting

Exploit Title: Motigo Forums/Calendar/Guestbook Cross Site Scripting Date: 28.01.2012 Author: Sony Software Link: http://motigo.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/motigo-forumscalendarguestbook-cross.html...

Aimoo Forums Cross Site Scripting

Exploit Title: Aimoo Forums Cross Site Scripting Date: 25.01.2012 Author: Sony Software Link: http://www.aimoo.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/aimoo-forums-cross-site-scripting.html...

Yuku Forums Cross Site Scripting

Exploit Title: Yuku Forums Cross Site Scripting Date: 24.01.2012 Author: Sony Software Link: http://www.yuku.com/ Google Dorks: inurl:.yuku.com intext:forum Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/yuku-forums-cross-site-scripting.htm...

Snitz Forums 2000 - 'TOPIC_ID' SQL Injection

source: https://www.securityfocus.com/bid/51596/info Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, access or modi...

Snitz Forums 2000 - TOPIC_ID SQL Injection

Snitz Forums 2000 - TOPICID SQL Injection source: https://www.securityfocus.com/bid/51596/info Snitz Forums 2000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to...

Hackers selling cheap BOTNETs and DDOS on forums

Hackers selling cheap BOTNETs and DDOS on forums The Internet has revolutionized shopping around the world. Security researchers F-Secure reported recently in a post that hackers are Selling Cheap DDOS services on Various Forums. Hackers are offering services like distributed denial of service...

FuseTalk Forums 3.2 - windowed Cross-Site Scripting

FuseTalk Forums 3.2 - windowed Cross-Site Scripting source: https://www.securityfocus.com/bid/51227/info FuseTalk Forums is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could leverage this issue to execute arbitrary script co...

FuseTalk Forums 3.2 Cross Site Scripting

Exploit Title: FuseTalk Forums v3.2 Cross Site Scripting Date: 2.01.2012 Author: Sony Software Link: http://www.fusetalk.com/ Google Dorks: inurl:/login.cfm?windowed=yes Version: v3.2, maybe another version Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Nabble Forums Cross Site Scripting

Date: 13.10.2011 Author: Sony Software Link: http://www.nabble.com/ Google Dorks: inurl:NamlServlet.jtp or inurl:/template/NamlServlet.jtp?macro=3D Browser: Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2011/10/nabble-forums-cross-site-scripting.html...

Comm100 Forums Arbitrary Redirect

Date: 8.10.2011 Author: Sony Software Link: http://comm100.com/ Google Dorks: Forum Powered by Comm100 Blog : http://st2tea.blogspot.com .................................................................. Demo: http://hosted.comm100.com/Forum/Default.aspx?siteid=10000 Before:...

Optima DDOS 10a Botnet leaked on Underground Forums

Optima DDOS 10a botnet leaked on Underground Forums On underground forums "Optima DDOS 10a Botnet" full version posted for all to download and use. Complete new version of the acclaimed DDoS bot Optima Darkness. In this new version 10a according to the author was raised in secrecy bot system and...