Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Falcon CMS 1.4.3 RFI/XSS Multiple Remote Vulnerabilities ========================================================== --------------------------------------------------------------- ...

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

vigilecms-multi.txt

--------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / / ---------------------------------------------------------------------------------------...

IceBB 1.0rc6 <= Remote SQL Injection

VigileCMS 1.4 Multiple Remote Vulnerabilities --------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------- Author : DevilAuron http://devilsnight.altervista.org Vendor : VigileCMS 1....

VigileCMS 1.4 Multiple Remote Vulnerabilities

VigileCMS 1.4 Multiple Remote Vulnerabilities --------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------- Author : DevilAuron http://devilsnight.altervista.org Vendor : VigileCMS 1....

Vigile CMS 1.4 - Multiple Vulnerabilities

Vigile CMS 1.4 - Multiple Vulnerabilities --------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / /...

VigileCMS 1.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================= VigileCMS 1.4 Multiple Remote Vulnerabilities ============================================= --------------------------------------------------------------------------------------- . .. | / || |...

Vigile CMS 1.4 - Multiple Vulnerabilities

--------------------------------------------------------------------------------------- . .. | / || | / |/ \ / / | | \ \ | | \ / \ / \ / // \ /\ /| | |/ | | /| | \ | \ \ |\ / || // || /|| / / / / / ---------------------------------------------------------------------------------------...

greensql-xss.txt

Site: http://greensql.net/ live-demo: http://demo.greensql.net/ Platform: alls Bug: permanent xss Special condition: none Impact : semi-critical ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction =========== GreenSQ...

greensql firewall permanent xss

Site: http://greensql.net/ live-demo: http://demo.greensql.net/ Platform: alls Bug: permanent xss Special condition: none Impact : semi-critical ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction =========== GreenSQ...

PhpBB Xs 2 profile.php Permanent Xss Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PhpBB Xs 2 profile.php Permanent Xss Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Found By Seph1roth +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ POST METHOD Corrupted page:...

phpbb-permxss.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ PhpBB Xs 2 profile.php Permanent Xss Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Found By Seph1roth +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ POST METHOD Corrupted page:...

vbultop-xss.txt

+-------------------------------------------------------------------- + + New post Topic Hijacking XSS All vBulletin® v 3.x.x + +-------------------------------------------------------------------- + vendor site........: http://www.vbulletin.com/ + Affected Software .: vbulletin + Class...

vbulletin < 3.6.6 [permanent xss]

vendor site:http://www.vbulletin.com/ product:vbulletin 3.6.6 bug: permanent xss affected file: calendar.php risk : medium xss permanent must be loggued PoC : http://127.0.0.1/vbulletin/calendar.php?do=add&type=single&c=1 -- fill up the title field with : /titlescriptalertdocument.cookie/script...

vbul366-xss.txt

vendor site:http://www.vbulletin.com/ product:vbulletin fill up the title field with : alertdocument.cookie Event Date : some far away date ... like 2010 for exemple message : whatever . when it's done look at the :"Request Reminder for this Event" link. it looks like this:...

vikiboard012.txt

vendor site:http://vikingboard.com/ product:Vikingboard 0.1.2 bug:local file include & multiples permanent xss risk:medium error sql : /members.php?s=-80 xss permanent : - in private message , an attacker can send a pm to an administrator with some javascript into the subject field an get his...

Vikingboard (0.1.2) [ multiples vulnerability ]

vendor site:http://vikingboard.com/ product:Vikingboard 0.1.2 bug:local file include & multiples permanent xss risk:medium error sql : /members.php?s=-80 xss permanent : - in private message , an attacker can send a pm to an administrator with some javascript into the subject field an get his...

phpmyadmin.txt

vendor site:http://phpmyadmin.net/ product:PhpMyAdmin all version bug: xss permanent & full path disclosure global risk:high xss post : 1 create a table , with whatever name , when it's done , go to "operation" /dboperations.php and add a comment on your table with: '"alertdocument.cookie the...

[Full-disclosure] KorviBlog - XSS permanent !

Produit : KorviBlog - Langage : PHP - Site web officiel : http://korvi.jdhosts.net/ - Page vulnerable : livreor.php - Faille de securite : Cross Site Scripting Permanent - Explications : Ligne 4 : livreor$POST'prenom', $POST'emailFrom', $POST'body', time; Les variables $POST'prenom' ,...

SuSE Linux Kernel非授权操作SCS设备固件漏洞

BUGTRAQ ID: 11784 CVECAN ID: CVE-2004-1190 SuSE Linux是一款开放源代码Linux系统。 SuSE Linux对SCSI设备接口的管理存在漏洞，本地攻击者可能利用此漏洞非授权修改破坏设备的固件。 SuSE Linux可能允许本地攻击者覆盖小型计算机系统接口（SCSI）设备的固件。拥有只读访问权限的本地攻击者可以向SCSI设备发送SCSI命令覆盖固件，导致设备永久的不可恢复的失效，可能必须送回厂商才能修复。 S.u.S.E. Linux Enterprise Server 9 S.u.S.E. Linux 9.0 RedHat ------...