Vulnerabilities in Dataface Web Application Framework

Hello Bugtraq! I want to warn you about security vulnerabilities in Dataface Web Application Framework. ----------------------------- Advisory: Vulnerabilities in Dataface Web Application Framework ----------------------------- URL: http://websecurity.com.ua/4276/ -----------------------------...

CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello Bugtraq! I want to warn you about new security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. This is second advisory for this project. ------------------------------ Advisory: Day of bugs in WordPress 2: CSRF, Information Leakage...

CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello 3APA3A! I want to warn you about new security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. This is second advisory for this project. ------------------------------ Advisory: Day of bugs in WordPress 2: CSRF, Information Leakage a...

Information Leakage and Full path disclosure vulnerabilities in WordPress

Hello 3APA3A! I want to warn you about security vulnerabilities in WordPress which I published at 30.07.2010 during my Day of bugs in WordPress 2 project. ------------------------------ Advisory: Day of bugs in WordPress 2: Information Leakage and Full path disclosure vulnerabilities in WordPress...

PHP-Nuke 8.1.0.3.5b Command Execution

PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...

Vulnerabilities in SimpNews

Hello Bugtraq! I want to warn you about security vulnerabilities in SimpNews. ----------------------------- Advisory: Vulnerabilities in SimpNews ----------------------------- URL: http://websecurity.com.ua/4245/ ----------------------------- Affected products: SimpNews V2.47.03 and previous...

PHP-Nuke <= 8.1.3.5 (Your_Account) Remote Command Exec Exploit

No description provided by source. PHP-Nuke = 8.1.0.3.5b Remote Command Execution Exploit Author/s: Dante90 & yawn Contact Us: www.unitx.net Requirements: magicquotesgpc : off Greetings: [email protected] | [email protected] You will remember, Watson, how the dreadful business of the Abernetty...

PHP-Nuke 8.1.0.3.5b - Remote Command Execution

PHP-Nuke 8.1.0.3.5b - Remote Command Execution PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use...

PHP-Nuke 8.1.0.3.5b - Remote Command Execution

PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; m...

SimpNews 2.47.03 Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in SimpNews. ----------------------------- Advisory: Vulnerabilities in SimpNews ----------------------------- URL: http://websecurity.com.ua/4245/ ----------------------------- Affected products: SimpNews V2.47.03 and...

Vulnerabilities in WP-UserOnline for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в плагине WP-UserOnline для WordPress. XSS: С помощью специального запроса к сайту можно провести XSS атаку. Для это нужно специальным образом не через браузер отправить GET запрос к странице...

WordPress Cimy Counter Plugin <= 0.9.5 - Vulnerabilities

This Cimy Counter plugin has many vulnerabilities such as full path disclosure, redirector, cross-site scripting and HTTP response spitting vulnerabilities. Solution Update the plugin...

WordPress Plugin Cimy Counter - Full Path Disclosure Redirector Cross-Site Scripting HTTP Response Spitting

WordPress Plugin Cimy Counter - Full Path Disclosure Redirector Cross-Site Scripting HTTP Response Spitting ---------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://sebug.net/exploit/19862/ ----------------------------- Affecte...

WordPress in Cimy Counter Multiple Vulnerability

Exploit for php platform in category web applications ================================================ WordPress in Cimy Counter Multiple Vulnerability ================================================ ----------------------------- Affected products: Cimy Counter 0.9.4 and previous versions...

WordPress Plugin Cimy Counter - Full Path Disclosure / Redirector / Cross-Site Scripting / HTTP Response Spitting

---------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://sebug.net/exploit/19862/ ----------------------------- Affected products: Cimy Counter 0.9.4 and previous versions. ----------------------------- Timeline: 20.04.2010 -...

Vulnerabilities in Cimy Counter for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Redirector, Cross-Site Scripting и HTTP Response Spitting уязвимостях в плагине Cimy Counter для WordPress. Full path disclosure: http://site/wp-content/plugins/cimy-counter/cimycounter.php...

Vulnerabilities in Cimy Counter for WordPress

No description provided by source. I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/...

Cimy Counter For Wordpress Full Path Disclosure / Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/ -----------------------------...

Vulnerabilities in Cimy Counter for WordPress

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin Cimy Counter for WordPress. ----------------------------- Advisory: Vulnerabilities in Cimy Counter for WordPress ----------------------------- URL: http://websecurity.com.ua/4170/ ----------------------------- Affected...

PHP Event Calendar 1.5 Cross Site Request Forgery / Cross Site Scripting / Traversal

Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site Scripting Cross-Site Scripting attacks are a type ...