Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. Exploit...

08cms home system injection vulnerability-vulnerability warning-the black bar safety net

Title: 08cms home system injection vulnerability Team: 0 8 Security Team Author: 0 8 Security Team Starters: 0 8 Security Team This loophole in the 5 month has been the audit came out, now the vulnerability is released. Register an account member profile-basic information view form to get your ow...

phpVibe 3.1 Persistent XSS Vulnerability

This exploit allow attackers to inject script code in members list 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS,...

MyBB 1.6.8 With AdvancedProfile 3.1 SQL Injection

-------------------- IN The NAme OF God -------------------- -====MyBB 1.6.8 Sql Injection Vulnerability====- Exploit Title: MyBB 1.6.8 Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack Script Site : http://mybb.com MAil : No0PMatyahoodotcom -====Dork====-...

PG Social Networking - Arbitrary File Upload

PG Social Networking - Arbitrary File Upload ============================================================== PG Social Networking --Shell upload Vulnerabilty ============================================================== Name : PG Social Networking --Shell upload Vulnerabilty Date : july 9,2010...

Unfixed XSS vulnerability at www.meetgreatcouples.com

Security researcher BackDoor, has submitted on 13/10/2007 a cross-site-scripting XSS vulnerability affecting www.meetgreatcouples.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/11/2007. It is...

Design/Logic Flaw

The editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does not properly check the 1 themes.dat, 2 languages.dat, 3 profession.dat, 4 gen.dat, 5 marstat.dat, 6 states.dat, and 7 ages.dat files before saving profile settings of members, which has unknown impact a...