4355 matches found
Hydra CMS Cross Site Scripting / SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== Hydra CMS Cross Site Scripting / SQL Injection Vulnerabilities ============================================================== Hello Full-Disclosure! I want to warn you about...
Hydra CMS SQL Injection / Cross Site Scripting
Hello Full-Disclosure! I want to warn you about vulnerabilities in Hydra Engine. It's commercial Ukrainian CMS. ----------------------------- Advisory: Vulnerabilities in Hydra Engine ----------------------------- URL: http://websecurity.com.ua/3453/ ----------------------------- Timeline:...
FileExecutive 1 - Multiple Vulnerabilities
============================================================================== » Thx To : Jiko ,H.Scorpion ,Dr.Bahy ,T3rr0rist ,Golden-z3r0 ,Shr7 Team . ============================================================================== » FileExecutive Multiple Vulnerabilities...
FileExecutive 1 - Multiple Vulnerabilities
FileExecutive 1 - Multiple Vulnerabilities ============================================================================== » Thx To : Jiko ,H.Scorpion ,Dr.Bahy ,T3rr0rist ,Golden-z3r0 ,Shr7 Team . ============================================================================== » FileExecutive Multip...
FileExecutive File Disclosure / Path Disclosure / Shell Upload
============================================================================== » Thx To : Jiko ,H.Scorpion ,Dr.Bahy ,T3rr0rist ,Golden-z3r0 ,Shr7 Team . ============================================================================== » FileExecutive Multiple Vulnerabilities...
FileExecutive v1.0.0 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ============================================= FileExecutive v1.0.0 Multiple Vulnerabilities ============================================= ============================================================================== » FileExecutive...
Social Web CMS <= Beta 2 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================= Social Web CMS Vuln:: Directory Listing http://server/modules/ Full Path Disclosure From Unlogged Browsing http://server/module.php?module=simplemessaging&view=delmsg&msgid= User Redirectio...
New-CMS 1.08 LFI / XSS / XSRF / Shell Upload
Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...
New-CMS v1.08 Multiple Vulnerability
Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...
Vulnerabilities in Hydra Engine
Здравствуйте 3APA3A! Сообщаю вам о Full path disclosure, SQL Injection и Cross-Site Scripting уязвимостях в системе Hydra Engine. Это украинская CMS. Full path disclosure: http://site/search/’/ SQL Injection: http://site/search/'20and20version3E5--20/ XSS:...
Multiple vulnerabilities in XAMPP
No description provided by source. I am continue informing you about multiple vulnerabilities in XAMPP. ----------------------------- Advisory 7 ----------------------------- CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP ----------------------------- URL:...
XAMPP Cross Site Request Forgery / Cross Site Scripting / Path Disclosure / SQL Injection / Traversal
I want to warn you about multiple vulnerabilities in XAMPP. I disclosed at my site multiple vulnerabilities in XAMPP in 2009 in total 7 advisories. And informed developers about them. Also I published these vulnerabilities at securityvulns.ru securityvulns.com. And now I'm informing you about the...
PR09-02 Multiple Cross-Site Scripting (XSS) / Cross Domain redirects and Server path information disclosure on SAP BusinessObjects version 12
Hi, We have found that SAP BusinessObjects version 12 is vulnerable to Multiple Cross-Site Scripting XSS, Cross Domain redirects and Server path information disclosure with the following consecuences: -An attacker may be able to cause execution of malicious scripting code in the browser of a vict...
Joomla! 1.5.12 - Connect Back
Joomla! 1.5.12 - Connect Back !/usr/bin/php . TITLE: Joomla 1.5.12 connect back exploit AUTHOR: Nikola Petrov [email protected] VERSION: 1.0 LICENSE: GNU General Public License Platform: Joomla 1.5.12 Vulnerabilities discovery and implementation: Nikola Petrov [email protected] Date: 27.08.20...
Joomla 1.5.12 connect back exploit
Exploit for unknown platform in category web applications ================================== Joomla 1.5.12 connect back exploit ================================== !/usr/bin/php . TITLE: Joomla 1.5.12 connect back exploit AUTHOR: Nikola Petrov email protected VERSION: 1.0 LICENSE: GNU General Publ...
Joomla! 1.5.12 - Connect Back
!/usr/bin/php . TITLE: Joomla 1.5.12 connect back exploit AUTHOR: Nikola Petrov [email protected] VERSION: 1.0 LICENSE: GNU General Public License Platform: Joomla 1.5.12 Vulnerabilities discovery and implementation: Nikola Petrov [email protected] Date: 27.08.2009 Joomla 1.5.12 suffers from...
DeluxeBB存在多个安全漏洞
Bugraq ID: 37448 CVE ID：CVE-2009-4465 CVE-2009-4466 CVE-2009-4467 CVE-2009-4468 DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本，验证绕过和安全绕过等攻击。 具体漏洞如下： -部分管理控制面板文件不受访问保护。 -部分日志文件不受访问保护。 -在用户注册过程之后，简单的发送特殊链接，可绕过邮件注册校验。 -通过访问邮件列表字段的末页获得USERID -存在路径泄漏问题。 DeluxeBB = 1.3 目前没有解决方案提供：...
Erolife AjxGaleri VT - Database Disclosure
Erolife AjxGaleri VT - Database Disclosure ============================================================================== » Note : Mutlu Yillar Millettt ============================================================================== » Erolife AjxGaleri VT Database Disclosure Vulnerability...
CMS-DB 0.7.13 Cross Site Scripting
view source print? Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db URL: /cms/admin/newuser.php PARAMS: user=USERNAME&pass=PASSWORD&repeat=PASSWORD&pages=on&files=on&includes=on&template=on&gbook=on&blog=on&stats=on&button=Save -Delete user:...
QuickEStore 7.9 SQL Injection
======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...