PHP Server Monitor Cross Site Scripting

Author: loneferret of Offensive Security Product: PHP Server Monitor Version: 2.0.1 and maybe older versions Google Dork: intext="Powered by PHP Server Monitor v2.0.1" yes people have made this available on the web Software Download: http://sourceforge.net/projects/phpservermon/ Tested on: Ubuntu...

Multiple vulnerabilities in Achievo

High-Tech Bridge Security Research Lab discovered two vulnerabilities in Achievo, which can be exploited to perform SQL injection and cross-site scripting XSS attacks. 1 SQL Injection vulnerability in Achievo: CVE-2012-5865 The vulnerability was discovered in the "dispatch.php" script while...

WordPress Plugin Spider Catalog 1.1 - HTML Code Injection Cross-Site Scripting

WordPress Plugin Spider Catalog 1.1 - HTML Code Injection Cross-Site Scripting 1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Wordpress Plugin Catalog HTML Code Injection and Cross-site scripting Dork: N/A...

WordPress Plugin Spider Catalog 1.1 - HTML Code Injection / Cross-Site Scripting

1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Wordpress Plugin Catalog HTML Code Injection and Cross-site scripting Dork: N/A Date: 31-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Version: 1.1...

WordPress Spider Catalog Plugin 1.1 - HTML Code Injection and Cross-Site Scripting

Spider Catalog plugin is prone to HTML code injection and cross-site scripting vulnerabilities. Solution Update the plugin...

Wordpress Plugin Catalog HTML Code Injection and Cross-site scripting

Spider WordPress Product Catalog plugin is a convenient tool for organizing the products represented on your website into catalogs. Each product on the catalog is assigned with a relevant category, which makes it easier for the customers to search and identify the needed products within the...

Fedora 18 : phpMyAdmin-3.5.3-1.fc18 (2012-15691)

phpMyAdmin 3.5.3.0 2012-10-08 =============================== - interface Browse mode 'Show' button gives blank page if no results anymore - interface Copy Database Ajax feedback vanishes long before copying is done - interface GC-maxlifetime warning incorrectly displayed - interface Search fails...

Wordpress Count per Day Plugin 3.2.3 XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: wordpress Count per Day Cross Site Scripting Vulnerability Google Dork:inurl:/wp-content/plugins/count-per-day Date: 08/24/2012 Author: Crim3R Version 3.2.3 Vendor Home :...

xt:Commerce VEYTON 4.0.15 (products_name_de) Script Insertion Vulnerability

Exploit for php platform in category web applications xt:Commerce VEYTON 4.0.15 productsnamede Script Insertion Vulnerability form name="XSS" method="POST"...

MediaSpan Website Management Cross Site Scripting

Exploit Title: MediaSpan Website Management Cross Site Scripting Vulnerability Google Dork: intext:":Copyright © 2012 CUMULUS MEDIA and MediaSpan" Date: 08/24/2012 Author: Crim3R Vendor Home : http://www.mediaspanonline.com/products/websitemanagement/ Tested on: all...

Oracle GlassFish Server Multiple XSS and CSRF Vulnerabilities

This host is running Oracle GlassFish Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboracleglassfishservermultvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ Oracle GlassFish Server Multiple XSS and CSRF Vulnerabilities Authors: Sooraj KS Copyright: Copyright c 20...

Oracle GlassFish Server 3.1.1 Multiple Vulnerabilities (Apr 2012)

Oracle GlassFish Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

w-CMS 2.0.1 CSRF / XSS / File Disclosure / Shell Upload

+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...

w-CMS 2.0.1 - Multiple Vulnerabilities

w-CMS 2.0.1 - Multiple Vulnerabilities +----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1...

w-CMS 2.0.1 - Multiple Vulnerabilities

+----------------------------------------------------------------------+ | | | | | | | | | | \ | | | | | | | | | | | | | | | | | | |/ |/ | |/ / ||| | | | | | | | | | | | | | | | || || | | | |/||,|||\ ||/ | | | |/| | | | x Exploit Title: w-CMS 2.0.1 Multiple Vulnerabilities | | x Google Dork:...

Virtual War v1.5.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ===========================!Expl0!Ts!==================================== » --- Script : vwar150r15 » --- Exploit Title : Multiple Exploit SQL/Xss/Html Code injection/CSRF add admin » --- Date : 4- 01- 2012 » --- Author : Expl0!Ts » --- Softwa...

ArticleSetup Multiple Persistence XSS / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Overview: --------- ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities. Technical Description:...

ArticleSetup 1.11 Cross Site Scripting / SQL Injection

Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory : http://secpod.org/blog/?p=497 http://secpod.org/advisories/SecPodArticleSetupMultipleVuln.txt...

Ananta_Gazelle1.0.zip <= Multiple Vulnerabilities

Exploit for php platform in category web applications » AnantaGazelle1.0.zip » --- Date : 29- 03- 2012 » --- Author : Expl0!Ts » --- Software Link : http://garr.dl.sourceforge.net/project/ananta/stable/Gazelle%201.0%20stable/AnantaGazelle1.0.zip » --- Version: » --- Category: php » --- Tested on:...

CarChat24 HTML Injection

Exploit Title: CarChat24 HTML Injection Date: 18.03.2012 Author: Sony Software Link: http://www.carchat24.com/ Web Browser : Mozilla Firefox Site : http://insecurity.ro PoC: http://st2tea.blogspot.com/2012/03/carchat24-html-injection.html...