198 matches found
Design/Logic Flaw
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7PGKT01...
CVE-2017-5594
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7PGKT01...
CVE-2017-5594
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7PGKT01...
CVE-2017-5594
The Pagekit CMS
PageKit 1.0.10 - Password Reset Exploit
Exploit for php platform in category web applications Exploit Title: Remote PageKit Password Reset Vulnerability Date:21-01-2017 Software Link: http://pagekit.com/ Exploit Author: Saurabh Banawar from SecureLayer7 Contact: http://twitter.com/securelayer7 Website: https://securelayer7.net...
PageKit 1.0.10 Password Reset
Exploit Title: Remote PageKit Password Reset Vulnerability Date:a21-01-2017 Software Link: http://pagekit.com/ Exploit Author: Saurabh Banawar from SecureLayer7a Contact: http://twitter.com/asecurelayer7 Website: httpas://securelayer7.neta Category: webapps 1. Description Anyremote user can reset...
PageKit 1.0.10 - Password Reset
PageKit 1.0.10 - Password Reset Exploit Title: Remote PageKit Password Reset Vulnerability Date:21-01-2017 Software Link: http://pagekit.com/ Exploit Author: Saurabh Banawar from SecureLayer7 Contact: http://twitter.com/securelayer7 Website: https://securelayer7.net Category: webapps 1...
PageKit 1.0.10 - Password Reset
Exploit Title: Remote PageKit Password Reset Vulnerability Date:21-01-2017 Software Link: http://pagekit.com/ Exploit Author: Saurabh Banawar from SecureLayer7 Contact: http://twitter.com/securelayer7 Website: https://securelayer7.net Category: webapps 1. Description Anyremote user can reset...
YOOtheme Pagekit CMS Multiple Vulnerabilities
Pagekit CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2014-8070
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
CVE-2014-8069
Multiple cross-site scripting XSS vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to index.php/user or 2 PATHINFO to index.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in YOOtheme Pagekit CMS 0.8.7 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTP Referer header to index.php/user or 2 PATHINFO to index.php...
Open redirect
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
CVE-2014-8070
Open redirect vulnerability in YOOtheme Pagekit CMS 0.8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to index.php/user/logout...
CVE-2014-8070
Pagekit CMS 0.8.7 is affected by CVE-2014-8070, an open redirect vulnerability. A crafted value in the redirect parameter to index.php/user/logout can redirect users to arbitrary sites, enabling phishing via trust manipulation. The OpenVAS/NVD entries corroborate a cross-site redirect risk and th...
CVE-2014-8069
CVE-2014-8069 affects YOOtheme Pagekit CMS 0.8.7. Multiple reflected XSS vulnerabilities allow remote attackers to inject arbitrary script/HTML via the HTTP Referer header to index.php/user or via PATH_INFO to index.php. Affected component is Pagekit’s index.php handling; root cause is improper v...
Pagekit 0.8.7 Cross Site Scripting / Open Redirect Vulnerabilities
Pagekit version 0.8.7 suffers from cross site scripting and open redirect vulnerabilities. Exploit Title: Pagekit 0.8.7 Multiple Vulnerabilities Date: 13-10-2014 Remote: Yes Exploit Author: Mahendra Vendor Homepage: http://www.pagekit.com/ Version: 0.8.7 Tested on: Windows XP SP 3 with WAMP Serve...
Pagekit 0.8.7 Cross Site Scripting / Open Redirect
Exploit Title: Pagekit 0.8.7 Multiple Vulnerabilities Date: 13-10-2014 Remote: Yes Exploit Author: Mahendra Vendor Homepage: http://www.pagekit.com/ Version: 0.8.7 Tested on: Windows XP SP 3 with WAMP Server 2.4 The latest Pagekit 0.8.7 CMS was found to be vulnerable with multiple reflected...