OctavoCMS Admin Panel Cross Site Scripting

Title : OctavoCMS Admin Panel Cross Site Scripting Vendor : http://octavocms.com/ Date : 2014.07.10 ================================ Proof of concept : First You should Login As Admin ... 1 : http://TARGET/admin/media/add.php?action="alert/XSS/ 2 :...

EUnet CMS Login Bypass / SQL Injection

Title : EUnet CMS Login Bypass Vulnerability Vendor : http://eunet.gr/ Dork : intext:"CMS by EUnet" Tested On Windows 8 , With Browser FireFox 30.0 Wtih This Vulnerability You Can Bypass Admin Page Admin Page : TARGET/adm/login.php | For English Lang :...

xClassified 1.2 Bypass / Cross Site Scripting / SQL Injection

Exploit Title : xClassified 1.2 Multiple Vulnerabilities Vendor : http://xclassified.artifectx.com/ Date Found : 2014-07-08 Vulnerabilities : SQL Injection / Login Bypass / XSS ================= Discovery Status: ================= Published Exploitation Technique: ======================= Remote...