UTStats - Cross-Site Scripting SQL Injection Full Path Disclosure

UTStats - Cross-Site Scripting SQL Injection Full Path Disclosure Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE...

PHPplanner PHP Planner 0.4 - Multiple Vulnerabilities

Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date: 13/05/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://phpplanner.sourceforge.net/ Version: = v.0.4 Tested on: PHP Full Path Disclosure Full Path Disclosure FPD vulnerabilities...

phpplanner <= PHP Planner v.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================================== phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities ======================================================== Title: phpplanner = PHP Planner v.0.4 Multiple Vulnerabilities Date:...

UTStats - Cross-Site Scripting / SQL Injection / Full Path Disclosure

Exploit Title: UTStats XSS, SQL Injection & Full path disclosure Date: 13-06-2010 Author: LuM Member Software Link: http://www.unrealadmin.org/forums/showthread.php?t=29786 Version: All recent versions. Tested on: Windows 7 x64 CVE : none Code : There are most likely some more bugs in it. I didn'...

Vulnerabilities in plugin Gigya Socialize for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Full path disclosure уязвимостях в плагине Gigya Socialize для WordPress. XSS: http://site/?223E3Cscript3Ealert/XSS/3C/script3E XSS имеет место в логин виджете данного плагина. Full path disclosure:...

grering card Remote Upload Vulnerability

Exploit for php platform in category web applications ======================================== grering card Remote Upload Vulnerability ======================================== Exploit Title: grering card Remote Upload Vulnerability Date: 04/06/2010 Author: Mr.Benladen Software Link: N/A Version:...

Gigya Socialize 1.1.8 For WordPress Cross Site Scripting

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin Gigya Socialize for WordPress. ----------------------------- Advisory: Vulnerabilities in Gigya Socialize for WordPress ----------------------------- URL: http://websecurity.com.ua/4153/ -----------------------------...

Vulnerabilities in plugin DS-Syndicate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о SQL Injection и Full path disclosure уязвимостях в плагине DS-Syndicate для Joomla. SQL Injection: http://site/index2.php?option=ds-syndicate&version=1&feedid=-120or20version=5 Full path disclosure: http://site/index2.php?option=ds-syndicate&version=1&feedid=...

Joomla DS-Syndicate SQL Injection

Hello Full-Disclosure! I want to warn you about security vulnerabilities in plugin DS-Syndicate for Joomla. ----------------------------- Advisory: Vulnerabilities in DS-Syndicate for Joomla ----------------------------- URL: http://websecurity.com.ua/4003/ ----------------------------- Affected...

New vulnerabilities in plugin DS-Syndicate for Joomla

Здравствуйте 3APA3A! Сообщаю вам о Full path disclosure, Cross-Site Scripting и Directory Traversal уязвимостях в плагине DS-Syndicate для Joomla. Full path disclosure: http://site/index2.php?option=ds-syndicate&version=1&feedid=10A1 Хотя данная FPD имеет место в том же самом скрипте и том же сам...

phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path

Exploit for php platform in category web applications ======================================================= phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path ======================================================= Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path...

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting Full Path

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting Full Path Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path Disclosure. Date: 20/04/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: www.phpmyadmin.net |...

phpMyAdmin 2.6.3-pl1 - Cross-Site Scripting / Full Path

Exploit Title: phpMyAdmin 2.6.3-pl1 Cross Site Scripting and Full Path Disclosure. Date: 20/04/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: www.phpmyadmin.net | http://www.phpmyadmin.net/homepage/downloads.php Version: 2.6.3-pl1 Tested on: PHP Cross...

TYPO3 t3m_cumulus_tagcloud 1.0 Cross Site Scripting

Hello Bugtraq! I want to warn you about security vulnerabilities in t3mcumulustagcloud plugin for TYPO3. ----------------------------- Advisory: Vulnerabilities in t3mcumulustagcloud for TYPO3 ----------------------------- URL: http://websecurity.com.ua/4181/ ----------------------------- Affecte...

Vulnerabilities in t3m_cumulus_tagcloud for TYPO3

Здравствуйте 3APA3A! Сообщаю вам о Cross-Site Scripting и Full path disclosure уязвимостях в плагине t3mcumulustagcloud для TYPO3. Данная XSS уязвимость идентична XSS уязвимости в Tagcloud для DLE http://websecurity.com.ua/3927/. Про миллионы флешек tagcloud.swf уязвимых к XSS атакам я упоминал в...

osCommerce 3.0a5 Cross Site Request Forgery / Cross Site Scripting / Local File Inclusion

Multiple Vulnerabilities in osCommerce Vendor SW: osCommerce Version: 3.0a5 but possible all versions Vendor URL: www.oscommerce.com Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 30 Apr 2010 Author: Alberto Fontanella Author WEB: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it...

New-CMS - Multiple Vulnerabilities

New-CMS - Multiple Vulnerabilities Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com...

New-CMS - Multiple Vulnerabilities

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

New-CMS v1.08 Multiple Vulnerability

Exploit for php platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category:...

Argosoft FTP Server .NET 1.0.2.1 Path Traversal

Exploit Title: Argosoft FTP SERVER .NET Version pwd 257 "/" is working directory //i'm standing on the ftp root directory ftp dir 200 Port command successful 150 Opening ASCII data connection drw-r--r-- 1 user group 0 Apr 26 18:29 tesstdir -rw-r--r-- 1 user group 0 Apr 26 18:29 testfile.txt 226...