72 matches found
ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery (Add New Author)
Exploit Title : ApPHP MicroBlog 1.0.2 - Cross-Site Request Forgery Add New Author Author : Besim Google Dork : Date : 12/10/2016 Type : webapps Platform : PHP Vendor Homepage : - Software link : http://www.scriptdungeon.com/jump.php?ScriptID=9162 CSRF PoC function submitRequest var xhr = new...
Microblog Poster <= 1.6.0 - Authenticated Blind SQL Injection
The Microblog Poster – Auto Publish on Social Media WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
WordPress Microblog Poster Plugin <= 1.6.0 - Blind SQL Injection
Because of this vulnerability, authenticated administrators can execute arbitrary SQL commands Solution Update this plugin...
ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities
No description provided by source. ----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RCE...
ApPHP MicroBlog 1.0.1 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1 Free Version...
microBlog 2.0 Index.PHP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16270/info microBlog is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitatio...
WordPress Microblog Plugin <= 0.4.0 - XSS
Because of this vulnerability in get.php, the attackers can inject arbitrary web script or HTML via the "oauthverifier" parameter. Solution Update the plugin...
ApPHP MicroBlog 1.0.1 - Remote Command Execution
ApPHP MicroBlog 1.0.1 - Remote Command Execution !/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1...
ApPHP MicroBlog 1.0.1 - Remote Command Execution
!/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1 Free Version EDB-ID: 33030 print " -= LOTFREE...
ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities
ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities ----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RCE...
ApPHP MicroBlog 1.0.1 - Multiple Vulnerability (LFI/RCE) Vulnerabilities
Exploit for php platform in category web applications ----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RC...
ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities
----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RCE http://path/index.php?jiko;systemdir=/ LFI...
CVE-2011-3756
MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...
Information disclosure
MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...
CVE-2011-3756
Summary: CVE-2011-3756 affects MicroBlog 0.9.5. The vulnerability enables information disclosure by directly requesting a PHP file (e.g., init.php), causing an error message that reveals the installation path. This is a server-side information leakage issue that exposes sensitive path information...
CVE-2011-3756
MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...
PT-2011-4646
Name of the Vulnerable Software and Affected Versions MicroBlog version 0.9.5 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by revealing the installation path in an error message. For example, requesting init.ph...
CVE-2011-3756: Exposure of Sensitive Information to an Unauthorized Actor
MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...
SA-CONTRIB-2010-020 - Facebook-style Statuses (Microblog) - Access bypass
The Facebook-style Statuses Microblog module enables each user to have a stream of messages "statuses" like on Facebook. Users can update their own status as well as write messages to other users by visiting the other user's profile. When a user updates his own status and then updates it again...