Uploadify jQuery Generic File Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Uploadify jQuery Generic File Upload (Metasploit)

This module exploits an arbitrary File Upload and Code Execution flaw Uploadify script jQuery Multiple File Upload, the vulnerability allows for arbitrary file upload and remote code execution POST Data to Vulnerable uploadify.php in any CMS/SCRIPT use Uploadify. Some Joomla, WordPress,...

JQuery Tooltip Cross Site Scripting

/ Author: Claudio Contin XSS bug on http://www.jquerytools.org/ tooltip component / Tooltip component doesn't sanitize html passed to the 'title' element, even though the html is already sanitized before been passed to tooltip class. Cross site scripting is possible if user has control of the inp...

Joomla! Component com_movm - SQL Injection

Joomla! Component commovm - SQL Injection Exploit Title: Joomla commovm SQL Injection Date: 31-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.movm.net/ Version: 1.0 Date Added 28 July 2012 License: Commercial $ 49.99 us Demo...

Pritlog v0.821 CMS - Multiple Web Vulnerabilities

Title: ====== Pritlog v0.821 CMS - Multiple Web Vulnerabilities Date: ===== 2012-04-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=534 VL-ID: ===== 534 Introduction: ============= PRITLOG is an extremely simple, small 500K uncompressed and powerful blog system. It...

EmbryoCore CMS v1.03 Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities Introduction: ============= EmbryoCore is a blog / content management system written using PHP5 s newest features. Highly customizable, XHTML:Strict compliant, with full...

EmbryoCore CMS 1.03 SQL Injection

Title: ====== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities Date: ===== 2012-04-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=503 VL-ID: ===== 503 Introduction: ============= EmbryoCore is a blog / content management system written using PHP5 s newest feature...

EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities

Document Title: =============== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=503 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 503...

EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities

Document Title: =============== EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=503 Release Date: ============= 2012-04-13 Vulnerability Laboratory ID VL-ID: ==================================== 503...

Uploadify Integration 0.9.6 Cross Site Scripting

waraxe-2012-SA085 - Reflected XSS in Uploadify Integration Wordpress plugin =============================================================================== Author: Janek Vind "waraxe" Date: 06. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-85.html Description of vulnerabl...

[waraxe-2012-SA#083] - Multiple Vulnerabilities in Uploadify 2.1.4

waraxe-2012-SA083 - Multiple Vulnerabilities in Uploadify 2.1.4 =============================================================================== Author: Janek Vind "waraxe" Date: 05. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-83.html Description of vulnerable software:...

Uploadify 2.1.4 Cross Site Scripting / Shell Upload

waraxe-2012-SA083 - Multiple Vulnerabilities in Uploadify 2.1.4 =============================================================================== Author: Janek Vind "waraxe" Date: 05. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-83.html Description of vulnerable software:...

Joomla 2.5 Modules Simple Spotlight Upload Shell

Exploit for php platform in category web applications Joomla 2.5 Modules Simple Spotlight Upload Shell 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 | | | | || | | | / \ | / | / / 3 1 | | | | | || | | | | | | | | || | / / 7 3 | Exploit Modules Joomla by...

PT-2012-1248

Name of the Vulnerable Software and Affected Versions jquery versions prior to 1.9.0 Description The issue is related to the jQuery function not properly differentiating between HTML and selectors, allowing for cross-site scripting attacks. In vulnerable versions, jQuery determines whether the...

Cloupia End-To-End FlexPod Management Directory Traversal

Cloupia End-to-end FlexPod Management - Directory Traversal Vulnerability Advisory Information Advisory ID: KUSTODIAN-2011-011 Date published: Jan 13, 2011 Vulnerability Information Class: Directory Traversal Remotely Exploitable: Yes Locally Exploitable: Yes Software Description Provides...

Cloupia End-to-end FlexPod Management Directory Traversal

Exploit for jsp platform in category web applications Cloupia End-to-end FlexPod Management - Directory Traversal Vulnerability Vulnerability Information Class: Directory Traversal Remotely Exploitable: Yes Locally Exploitable: Yes Software Description Provides end-to-end FlexPod management and...

Cloupia End-to-end FlexPod Management - Directory Traversal

Cloupia End-to-end FlexPod Management - Directory Traversal Vulnerability Advisory Information Advisory ID: KUSTODIAN-2011-011 Date published: Jan 13, 2011 Vulnerability Information Class: Directory Traversal Remotely Exploitable: Yes Locally Exploitable: Yes Software Description Provides...

FBC Market v1.1 - Cross Site Scripting Vulnerability

Document Title: =============== FBC Market v1.1 - Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=364 Release Date: ============= 2011-12-19 Vulnerability Laboratory ID VL-ID: ==================================== 364...

WordPress 1 JQuery Photo Gallery Slideshow Flash Cross Site Scripting

Islamic Republic Of Iran Security Team http://irist.ir/forum/ Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site Scripting Vulnerabilities Download......: http://wordpress.org/extend/plugins/1-jquery-photo-gallery-slideshow-flash/ Exploit.......:...

WordPress 1 jQuery Photo Gallery Slideshow Flash Plugin 1.01 - Cross Site Scripting

WordPress1 jQuery Photo Gallery Slideshow Flash plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can ste...