Mac's CMS 1.1.4 - Multiple Vulnerabilities

Exploit for php platform in category web applications Summary: ======== 1. CSRF - Adding/Editing administrator account 2. Cross site scripting 3. Local path disclosure 1. CSRF - Adding/Editing administrator account: =============================================== Following exploits can be used...

Quark Chat 1.0 XSS / SQL Injection / Path Disclosure

Exploit Title: Quark Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0 Contacts: https://twitter.com/Dylanirzi11...

Macs CMS 1.1.4 - Multiple Vulnerabilities

Macs CMS 1.1.4 - Multiple Vulnerabilities Exploit Title: Mac's CMS - Multiple vilnerabilities Date: 2013 14 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://macs-framework.sourceforge.net/ Tested on...

Mac's CMS 1.1.4 - Multiple Vulnerabilities

Exploit Title: Mac's CMS - Multiple vilnerabilities Date: 2013 14 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://macs-framework.sourceforge.net/ Tested on: Linux & Windows, PHP 5.3.4 Affected...

update for phpMyAdmin (important)

This version upgrade of phpMyAdmin fixed various security issues SQL injection, XSS, full path disclosure, Clickjacking...

Mac's CMS 1.1.4 CSRF / XSS / Path Disclosure

Exploit Title: Mac's CMS - Multiple vilnerabilities Date: 2013 14 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://macs-framework.sourceforge.net/ Tested on: Linux & Windows, PHP 5.3.4 Affected...

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage:...

Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities

Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://monoray.net/products/6-open-real-estate Tested on: Linux & Windows, PHP...

Open Real Estate CMS 1.5.1 CSRF / Path Disclosure / SQL Injection

Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://monoray.net/products/6-open-real-estate Tested on: Linux & Windows, PHP...

phpMyAdmin 3.5.x < 3.5.8.2 / 4.0.x < 4.0.4.2 Multiple Vulnerabilities

Binary data 6967.prm...

WordPress WPtouch Plugin Path Disclosure Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WPtouch / WPtouch Pro XSS / Path Disclosure Vulnerabilities

WPtouch and WPtouch Pro suffer from cross site scripting and path disclosure vulnerabilities. I want to inform you about vulnerabilities in WPtouch and WPtouch Pro plugins for WordPress. These are Cross-Site Scripting and Full path disclosure vulnerabilities. These XSS holes are in...

WPtouch / WPtouch Pro XSS / Path Disclosure

Hello list! I want to inform you about vulnerabilities in WPtouch and WPtouch Pro plugins for WordPress. These are Cross-Site Scripting and Full path disclosure vulnerabilities. These XSS holes are in ZeroClipboard.swf, which is used in the plugin. In February I wrote about Cross-Site Scripting...

phpMyAdmin 3.5.x < 3.5.8.2 / 4.0.x < 4.0.4.2 Multiple Vulnerabilities (PMASA-2013-8 - PMASA-2013-15

According to its self-identified version number, the phpMyAdmin install hosted on the remote web server is 3.5.x earlier than 3.5.8.2 or 4.0.x earlier than 4.0.4.2. It is, therefore, affected by the following vulnerabilities : - Numerous input validation errors exist that could lead to cross-site...

Mandriva Linux Security Advisory : phpmyadmin (MDVSA-2013:203)

Multiple vulnerabilities has been discovered and corrected in phpmyadmin : - XSS due to unescaped HTML Output when executing a SQL query CVE-2013-4995. - 5 XSS vulnerabilities in setup, chart display, process list, and logo link. If a crafted version.json would be presented, an XSS could be...

FreeBSD : phpMyAdmin -- multiple vulnerabilities (f4a0212f-f797-11e2-9bb9-6805ca0b3d42)

The phpMyAdmin development team reports : XSS due to unescaped HTML Output when executing a SQL query. 5 XSS vulnerabilities in setup, chart display, process list, and logo link. If a crafted version.json would be presented, an XSS could be introduced. Full path disclosure vulnerabilities. XSS...

phpMyAdmin -- multiple vulnerabilities

The phpMyAdmin development team reports: XSS due to unescaped HTML Output when executing a SQL query. 5 XSS vulnerabilities in setup, chart display, process list, and logo link. If a crafted version.json would be presented, an XSS could be introduced. Full path disclosure vulnerabilities. XSS...

FreeBSD : wordpress -- multiple vulnerabilities (049332d2-f6e1-11e2-82f3-000c29ee3065)

The wordpress development team reports : - Blocking server-side request forgery attacks, which could potentially enable an attacker to gain access to a site - Disallow contributors from improperly publishing posts - An update to the SWFUpload external library to fix cross-site scripting...

Full path disclosure vulnerabilities.

PMASA-2013-12 Announcement-ID: PMASA-2013-12 Date: 2013-07-28 Updated: 2013-07-30 Summary Full path disclosure vulnerabilities. Description By calling some scripts that are part of phpMyAdmin in an unexpected way, it is possible to trigger phpMyAdmin to display a PHP error message which contains...