iSupport 1.8 - SQL Injection Vulnerability

No description provided by source. iSupport 1.8 SQL Injection Vulnerability Date: 2011-06-23 Author: Brendan Coles [email protected] Advisory: http://itsecuritysolutions.org/2011-06-23-iSupport-1.8-SQL-Injection-Vulnerability/ Software: iSupport Version: = 1.8 Homepage:...

IDevSpot iSupport 1.8 index.php cons_page_title Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

IDevSpot iSupport 1.8 rightbar.php suser Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

iDevSpot iDevCart 1.10 Multiple Local File Inclusion Vulnerabilities

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

IDevSpot iSupport 1.8 Index.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19964/info IDevSupport iSupport is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and...

PhpLinkExchange 1.02 - XSS/Upload Vulerability

No description provided by source. PhpLinkExchange v1.02 - XSS/Upload Vulerability Discovered by : Stink' Date : 2009-12-16 Dork : PhpLinkExchange v1.02 Website Publisher : http://www.idevspot.com/PhpLinkExchange.php -- XSS in URL -- http://server/links/PhpLinkExchange/index.php?page=home&catid=X...

IDevSpot BizDirectory 1.9 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20081/info IDevSpot BizDirectory is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script...

IDevSpot iSupport 1.8 open_tickets.php ticket_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

IDevSpot PHPLinkExchange 1.0 Index.PHP Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '81821' ssvid version = '1.0' author = '皮皮' vulDate = '2006-07-24' createDate = '2015-12-24...

IDevSpot BizDirectory 2.04 - 'page' Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30980/info IDevSpot BizDirectory is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

CVE-2012-5326

Cross-site request forgery CSRF vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action...

CVE-2012-5326

CVE-2012-5326 affects IDevSpot iSupport 1.x. The vulnerability is a CSRF in admin/function.php that allows remote attackers to hijack administrator authentication to perform actions that add administrator accounts. The connected documents provide the same description and do not specify exploitati...

CVE-2012-5326

Cross-site request forgery CSRF vulnerability in admin/function.php in IDevSpot iSupport 1.x allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via an administrators action...

idev-Classifieds 1.0 Cross Site Request Forgery

Exploit Title: idev-Classifieds 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-classifieds/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide...

idev-DigiVendor 5.0 Cross Site Request Forgery

Exploit Title: idev-DigiVendor 5.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-digivendor/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowHide...

idev-Classifieds 1.0 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: idev-Classifieds 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-classifieds/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide...

idev-QuoteManager 1.0 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: idev-QuoteManager 1.0 CSRF Author: Jonturk75 Vendor or Software Link: http://idevspot.com/ Category:: webapps Demo : http://idevspot.com/demos/idev-quotemanager/admin Greetz: Inj3ct0r Exploit DataBase 1337day.com ShowShowHide...

CVE-2012-1779

Cross-site scripting XSS vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in IDevSpot idev-BusinessDirectory 3.0 allows remote attackers to inject arbitrary web script or HTML via the SEARCH parameter to index.php...