cms -db 0.7.13 - Multiple Vulnerabilities

Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db URL: /cms/admin/newuser.php PARAMS: user=USERNAME&pass=PASSWORD&repeat=PASSWORD&pages=on&files=on&includes=on&template=on&gbook=on&blog=on&stats=on&button=Save -Delete user: USR:...

cms -db 0.7.13 - Multiple Vulnerabilities

cms -db 0.7.13 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db URL: /cms/admin/newuser.php PARAMS:...

DeluxeBB <= 1.3 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== DeluxeBB = 1.3 Multiple Vulnerabilities ======================================== Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/...

DeluxeBB 1.3 - Multiple Vulnerabilities

DeluxeBB 1.3 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang...

DeluxeBB 1.3 - Multiple Vulnerabilities

Author: cp77fk4r | Empty0pagEShift+2gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang http://server/settings/ Cross Site Scripting...

DeluxeBB 1.3 XSS / Bypass

Author: cp77fk4r | Empty0pagEShift+2gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang http://server/settings/ Cross Site Scripting...

Social Web CMS &lt;= Beta 2 Multiple Vulnerabilities

No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com/ Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...

Social Web CMS <= Beta 2 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================= Social Web CMS Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friend...

social Web CMS Beta 2 - Multiple Vulnerabilities

social Web CMS Beta 2 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...

social Web CMS Beta 2 - Multiple Vulnerabilities

Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends: http://server/user/view/addfriend/login/VALIDFRIEND or...

[ISecAuditors Security Advisories] QuiXplorer &lt;=2.4.1beta Remote Code Execution vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...

Interspire Shopping Cart - Full Path Disclosure

Interspire Shopping Cart - Full Path Disclosure Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | |...

Interspire Shopping Cart Full Path Disclosure

No description provided by source. Exploit Title: Interspire Shopping Cart Full Path Disclosure Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.interspire.com/ Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || ...

Miniweb 2.0 - Full Path Disclosure

Miniweb 2.0 - Full Path Disclosure Miniweb 2.0 Full Path Disclosure Name Miniweb 2.0 Vendor http://www.miniweb2.com Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-12 X. INDEX I. ABOUT THE APPLICATION II...

Miniweb 2.0 Full Path Disclosure

No description provided by source. Miniweb 2.0 Full Path Disclosure Name Miniweb 2.0 Vendor http://www.miniweb2.com Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-12 X. INDEX I. ABOUT THE APPLICATION II...

Miniweb 2.0 Full Path Disclosure

Exploit for unknown platform in category web applications ================================ Miniweb 2.0 Full Path Disclosure ================================ Miniweb 2.0 Full Path Disclosure Name Miniweb 2.0 Vendor http://www.miniweb2.com X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

Miniweb 2.0 - Full Path Disclosure

Miniweb 2.0 Full Path Disclosure Name Miniweb 2.0 Vendor http://www.miniweb2.com Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-12 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III. ANALYSIS IV. SAMPLE CODE V...

Vulnerabilities in TYPO3

Hello 3APA3A! I want to warn you about security vulnerabilities in TYPO3. These are Cross-Site Scripting, Full path disclosure and Redirector vulnerabilities. XSS: http://site/index.php?id=49&sword=223E3Cscript3Ealertdocument.cookie3C/script3E...

Vulnerabilities in WP-Cumulus for WordPress

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...

Vulnerabilities in WP-Cumulus for WordPress

No description provided by source. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://site/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS: http://site/wp-content/plugins/wp-cumulus/tagcloud.swf?mode=tags&tagcloud=%3Ctags%3E%3 ...