Unfixed XSS vulnerability at www.ecu.edu.au

Security researcher Hadi Kiamarsi, has submitted on 10/05/2010 a cross-site-scripting XSS vulnerability affecting www.ecu.edu.au, which at the time of submission ranked 83155 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Unfixed XSS vulnerability at www.tac.com

Security researcher Hadi Kiamarsi, has submitted on 22/05/2010 a cross-site-scripting XSS vulnerability affecting www.tac.com, which at the time of submission ranked 347397 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Unfixed XSS vulnerability at search.yccd.edu

Security researcher Hadi Kiamarsi, has submitted on 22/05/2010 a cross-site-scripting XSS vulnerability affecting search.yccd.edu, which at the time of submission ranked 311426 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is...

Unfixed XSS vulnerability at www.mastersoft-group.com

Security researcher Hadi Kiamarsi, has submitted on 21/05/2010 a cross-site-scripting XSS vulnerability affecting www.mastersoft-group.com, which at the time of submission ranked 6162210 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/201...

pragmaMx Blind SQL Injection

CMS Name : pragmaMx All Version Bug Type : Blind SQL/XPath Injection vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/pragmamx/files/pragmaMx%20%20%28full%29/pragmaMx%200.1.11/pragmaMx0.1.11.0.tar.gz/download PoC :...

pragmaMx CMS Blind SQL/XPath Injection vulnerability

No description provided by source. CMS Name : pragmaMx All Version Bug Type : Blind SQL/XPath Injection vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/pragmamx/files/pragmaMx%20%20%28full%29/p ...

Rumba XML XSS vulnerability

Script Name : Rumba XML All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://download.softpedia.ro/dl/4bf8d3951ea08865afb7c98b8c0476fa/4b2a1ca9/600056463/webscripts/PHP/xml18eng.zip PoC :...

Rumba XML suffers from a cross site scripting vulnerability

No description provided by source. Script Name : Rumba XML All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://download.softpedia.ro/dl/4bf8d3951ea08865afb7c98b8c0476fa/4b2a1ca9/600056463/webscripts/PHP/xml18eng.zip PoC :...

Rumba XM - Cross-Site Scripting

Rumba XM - Cross-Site Scripting Script Name : Rumba XML All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://download.softpedia.ro/dl/4bf8d3951ea08865afb7c98b8c0476fa/4b2a1ca9/600056463/webscripts/PHP/xml18eng.zip PoC :...

Rumba XML Cross Site Scripting

Script Name : Rumba XML All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://download.softpedia.ro/dl/4bf8d3951ea08865afb7c98b8c0476fa/4b2a1ca9/600056463/webscripts/PHP/xml18eng.zip PoC : http://target/path/index.php/"alert'Hadi...

Rumba XM - Cross-Site Scripting

Script Name : Rumba XML All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://download.softpedia.ro/dl/4bf8d3951ea08865afb7c98b8c0476fa/4b2a1ca9/600056463/webscripts/PHP/xml18eng.zip PoC : http://target/path/index.php/"alert'Hadi...

Daloradius XSS Vulnerability

No description provided by source. Script Name : daloradius All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/daloradius/ PoC : http://target/path/daloradius-users/login.php?error="scriptalert'Hadi...

Daloradius XSS Vulnerability

Script Name : daloradius All Version Bug Type : XSS vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/daloradius/ PoC : http://target/path/daloradius-users/login.php?error="scriptalert'Hadi Kiamarsi'/script example :...

AIOCP 1.4.001 Remote File Inclusion

Aiocp 1.4.001 Remote File Inclusion vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/aiocp/files/aiocp/AIOCP%201.4.001/aiocp14001.zip/download PoC : http://TARGET/PATH/public/code/cphtml2xhtmlbasic.php?page=SHELL example :...

Aiocp 1.4.001 File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================== Aiocp 1.4.001 File Inclusion Vulnerability ========================================== Aiocp 1.4.001 Remote File Inclusion vulnerability Found by : Hadi Kiamarsi Download :...

Aiocp 1.4.001 File Inclusion Vulnerability

No description provided by source. Aiocp 1.4.001 Remote File Inclusion vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/aiocp/files/aiocp/AIOCP%201.4.001/aiocp14001.zip/download PoC :...

AIOCP 1.4.001 - Remote File Inclusion

Aiocp 1.4.001 Remote File Inclusion vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/aiocp/files/aiocp/AIOCP%201.4.001/aiocp14001.zip/download PoC : http://TARGET/PATH/public/code/cphtml2xhtmlbasic.php?page=SHELL example :...

AIOCP 1.4.001 - Remote File Inclusion

AIOCP 1.4.001 - Remote File Inclusion Aiocp 1.4.001 Remote File Inclusion vulnerability Found by : Hadi Kiamarsi Contact : hadikiamarsi at hotmail.com Download : http://sourceforge.net/projects/aiocp/files/aiocp/AIOCP%201.4.001/aiocp14001.zip/download PoC :...

SQLiteManager Cross Site Scripting

SqLiteManager All Version Cross Site Scripting Found by : Hadi Kiamarsi Contact : [email protected] Download : http://downloads.sourceforge.net/project/sqlitemanager/sqlitemanager/1.2.0/SQLiteManager-1.2.0.zip?usemirror=heanet PoC : http://www.example.com/main.php?redirect=alert'Hadi Kiamars...

XSS in SqLiteManager

SqLiteManager All Version Cross Site Scripting Found by : Hadi Kiamarsi Contact : [email protected] Download : http://downloads.sourceforge.net/project/sqlitemanager/sqlitemanager/1.2.0/SQLiteManager-1.2.0.zip?usemirror=heanet PoC : http://www.example.com/main.php?redirect=scriptalert'Hadi...