Ez Blog 1.0 XSS / XSRF

----------------------------------------------------------------------------------------------- Title: Ez Blog XSS/XSRF Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Ez Blog v1.0 XSS/XSRF Multiple Vulnerabilities ================================================ ----------------------------------------------------------------------------------------------...

Ez Faq Maker - Multiple Vulnerabilities

----------------------------------------------------------------------------------------------- Title: Ez Faq Maker Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Ez Blog 1.0 - Cross-Site Scripting / Cross-Site Request Forgery

----------------------------------------------------------------------------------------------- Title: Ez Blog XSS/XSRF Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 15. December 2009...

Code injection

Unspecified vulnerability in the Front-End Editor in the comcontent component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors...

CVE-2009-3945

Unspecified vulnerability in the Front-End Editor in the comcontent component in Joomla! before 1.5.15 allows remote authenticated users, with Author privileges, to replace the articles of an arbitrary user via unknown vectors...

AlienVault OSSIM Web Front End Detection

The AlienVault Open Source Security Information Management OSSIM web front end was detected on the remote host. OSSIM is a suite of security tools used to monitor and maintain a network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42336; scriptversion"1.12";...

Basic Analysis and Security Engine Detection

This host is running Basic Analysis and Security Engine BASE. BASE provides a web front-end to query and analyze the alerts coming from a SNORT IDS system. OpenVAS Vulnerability Test $Id: basedetect.nasl 5720 2017-03-24 14:15:57Z cfi $ Basic Analysis and Security Engine Detection Authors: Michael...

Basic Analysis and Security Engine Detection

This host is running Basic Analysis and Security Engine BASE. BASE provides a web front-end to query and analyze the alerts coming from a SNORT IDS system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Dit.CMS <= 1.3 xss

Exploit for unknown platform in category web applications ================== Dit.CMS = 1.3 xss ================== | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' email protected...

Rookie Academy of crack Session cookie method-vulnerability warning-the black bar safety net

The so-called session cookies, is a platform in you after a successful login, a cookie that indicates you have passed verification, but with the General cookie is different, he will not be there on your hard drive, that is to say: before you leave the browser, it will disappear, which means: the...

[20091103] - Core - Front-End Editor Issue

When logged into the front end with Author access, it was possible to replace an article written by another user...

Micro's Articles system v1. 5 1 vulnerability-vulnerability warning-the black bar safety net

This system previously it was analysed today see with the updated version so download the back to see The previous vulnerability is up, but new holes came a is upload vulnerability A is background injection The first says that transfer in /manage/video/upfilesoft. asp does not contain the...

ZABBIX PHP前端多个输入验证漏洞

BUGTRAQ ID: 33965 zabbix是一个CS结构的分布式网络监控系统。 ZABBIX的PHP前端存在多个输入验证错误，远程攻击者可以通过提交恶意请求执行跨站请求伪造攻击、读取敏感信息或完全入侵有漏洞的系统。 1 include/validate.inc.php中没有正确的过滤对calcexp2函数所提交的extlang参数，这可能导致注入并执行任意PHP代码。 2 由于没有检查用户提交请求的有效性，远程攻击者可以通过提交HTTP执行非授权操作。 3...

CVE-2008-3511

Multiple cross-site scripting XSS vulnerabilities in Softbiz Image Gallery Photo Gallery allow remote attackers to inject arbitrary web script or HTML via the 1 latest parameter to a index.php, b images.php, c suggestimage.php, and d imagedesc.php; and the 2 msg parameter to index.php, images.php...

Wordtrans-web exec_wordtrans Function Arbitrary Command Execution

The remote host is running wordtrans-web, a web-based front-end for wordtrans, for translating words. The version of wordtrans-web installed on the remote host fails to sanitize input to the 'advanced' parameter of the 'wordtrans.php' script before using it in an 'passthru' statement to execute P...

Cacti index.php/sql.php Login Action login_username Parameter SQL Injection

The remote host is running Cacti, a web-based front-end to RRDTool for network graphing. The version of Cacti installed on the remote host fails to sanitize user input to the 'loginusername' parameter before using it in the 'authlogin.php' script to perform database queries. Regardless of PHP's...

Bypass the web environment keyword monitoring attempt-vulnerability warning-the black bar safety net

by Don not Fox http://blog.wang1.cn Problem: win2003+php environment, server installation similar to the“best information monitoring system,”The thing is, for some set of keywords for blocking. So I'm in phpshell, Execute sql queries and system command, you be prompted file does not have permissi...

Unfixed Redirect vulnerability at www.frontpagewebmaster.com

Security researcher 3lf3n1x, has submitted on 24/11/2007 a Redirect vulnerability affecting www.frontpagewebmaster.com, which at the time of submission ranked 26738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

Cross site scripting

Cross-site scripting XSS vulnerability in boundaryrules.jsp in the Administration Front End for Oracle Enterprise Ultra Search, as used in Database Server 9.2.0.8, 10.1.0.5, and 10.2.0.2, and in Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to inject arbitrary HTM...