ESCON SupportPortal Pro 3.0 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ESCON SupportPortal Pro Version: 3.0 Vendor Site: http://www.e-supportportal.com Software Download: http://www.e-supportportal.com/download.html Timeline: 29 May 2012:...

WordPress Plugin ThreeWP Email Reflector 1.13 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: ThreeWP Email Reflector Version: 1.13 Plugin Site: http://mindreantre.se/ Software Download: http://wordpress.org/extend/plugins/threewp-email-reflector/installation/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 Ma...

T-dah Webmail Client 3.2.0-2.3 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: T-dah Webmail Client Version: 3.2.0-2.3 Vendor Site: http://t-dahmail.sourceforge.net/index.php Software Download: http://sourceforge.net/projects/t-dahmail/ Contact: http://t-dahmail.sourceforge.net/forum/ Timeline: 29 May...

Wordpress Mini Mail Dashboard Widget 1.42 Stored XSS

Exploit for php platform in category web applications !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Mini Mail Dashboard Widget Version: 1.42 Software Download: http://wordpress.org/extend/plugins/mini-mail-dashboard-widget/ Timeline: 29 May 2012: Vulnerability reported to...

ESCON SupportPortal Pro 3.0 Cross Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: ESCON SupportPortal Pro Version: 3.0 Vendor Site: http://www.e-supportportal.com Software Download: http://www.e-supportportal.com/download.html Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...

WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting

WordPress Plugin postie 1.4.3 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: Postie Version: 1.4.3 Software Download: http://wordpress.org/extend/plugins/postie/ Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response...

WordPress Plugin simplemail 1.0.6 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: SimpleMail Version: 1.0.6 free version Vendor Site: http://codecanyon.net/item/wp-simplemail/1130008?ref=tinsley Software Download: http://wordpress.org/extend/plugins/wp-simplemail/ Timeline: 29 May 2012: Vulnerability report...

Useresponse 1.0.2 - Privilege Escalation / Remote Code Execution

!/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns found by bcoles @bclose and mrme @netninja exploit by...

Useresponse <= 1.0.2 Privilege Escalation & RCE Exploit

Exploit for php platform in category web applications !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns...

vBulletin 4.1.12 SQL Information Disclosure

TITLE ....... vBulletin 4.1.12 - sql information leak for logged-in users DATE ........ 03.05.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. Wh...

Concrete CMS 5.5.2.1 Cross Site Scripting

TITLE ....... Concrete 5.5.2.1 Cross Site Scripting DATE ........ 23.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.concrete5.org/ VERSION ..... 5.5.2.1 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What ...

VirtueMart 2.0.2 Information Disclosure

TITLE ....... VirtueMart 2.0.2 Information Disclosure DATE ........ 06.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://virtuemart.org VERSION ..... 2.0.2 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is t...

Concrete CMS 5.5.2.1 Information Disclosure

TITLE ....... Concrete5.5.2.1 CMS information disclosure bug DATE ........ 22.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.concrete5.org/ VERSION ..... 5.5.2.1 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this?...

Concrete CMS 5.5.2.1 SQL Injection

TITLE ....... Concrete 5.5.2.1 CMS - SQL Injection DATE ........ 22.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.concrete5.org/ VERSION ..... 5.5.2.1 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What i...

Joomla 2.5.3 Information Disclosure

TITLE ....... Joomla 2.5.3 information disclosure tested for admin DATE ........ 01.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://joomla.org VERSION ..... 2.5.3 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2...

eFront CMS 3.6.10 Information Disclosure

TITLE ....... eFront 3.6.10 CMS Information Disclosure bug DATE ........ 11.04.2012 public, after week or sth AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http:// VERSION ..... 3.6.10 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is...

Quick.CMS 4.0 Cross Site Scripting

TITLE ....... Quick.Cmsv4.0 XSS-over-GET ..................................... DATE ........ 18.03.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... http://opensolution.org/ ................................. VERSION...

Joomla Virtuemart 2.0.2 Information Disclosure

TITLE ....... VirtueMart Information Disclosure DATE ........ .0.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http:// VERSION ..... 2.0.2 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the type of vulnerabilit...

e107 Cross Site Scripting

TITLE ....... e107 CMS - reflected xss in registration page DATE ........ 16.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://e107.org VERSION ..... TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is the typ...

WordPress 3.3.1 Post-Auth Cross Site Scripting

TITLE ....... Wordpress 3.3.1 post-auth persistent XSS ............ DATE ........ 18.02.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... http://wordpress.org ................................ VERSION ..... 1.0.0...