1912 matches found
WordPress MDC Private Message Plugin 1.0.0 - Persistent XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress MDC Private Message Persistent XSS Date: 8/20/15 Exploit Author: Chris Kellum Vendor Homepage: http://medhabi.com/ https://wordpress.org/plugins/mdc-private-message/ Version: 1.0.0 ===================== Vulnerability...
PHPfileNavigator 2.3.3 Cross Site Scripting
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-PHPFILENAVIGATOR0812c.txt Vendor: ================================ pfn.sourceforge.net Product: =================================== PHPfileNavigator v2.3.3 pfn Is...
WordPress Filedownload 1.4 Open Proxy Vulnerability
WordPress Filedownload plugin version 1.4 suffers from an open proxy vulnerability. Title: Open Proxy in filedownload v1.4 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-11 Download Site: https://wordpress.org/plugins/filedownload/ Vendor: Peter Gross Vendor Notified:...
WordPress Job Manager Plugin 0.7.22 - Persistent XSS Vulnerability
Exploit for php platform in category web applications Job Manager Persistent XSS Details ======================================================================================== Product: Job Manager Plugin For Wordpress Vendor-URL: www.wp-jobmanager.com CVE-ID: CVE-2015-2321 Credits...
WordPress Job Manager Plugin 0.7.22 - Persistent XSS
Job Manager plugin is prone to a persistent XSS vulnerability, because email field was not sanitized. It allows an attacler to steal cookies or perform phishing attacks. Other attacks are also possible. Solution Update the plugin...
WordPress Filedownload 1.4 Open Proxy
Title: Open Proxy in filedownload v1.4 wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-11 Download Site: https://wordpress.org/plugins/filedownload/ Vendor: Peter Gross Vendor Notified: 2015-07-11 Vendor Contact: [email protected] Description: Creates a downloadlink with t...
D-Link DCS-2103 1.20 CSRF / Cross Site Scripting Vulnerabilities
Exploit for hardware platform in category web applications There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DCS-2103, Firmware...
WordPress Job Manager 0.7.22 Cross Site Scripting
Job Manager Persistent XSS Details ======================================================================================== Product: Job Manager Plugin For Wordpress Vendor-URL: www.wp-jobmanager.com CVE-ID: CVE-2015-2321 Credits...
D-Link DCS-2103 1.20 CSRF / Cross Site Scripting
Hello list! There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DCS-2103, Firmware 1.0.0. Version 1.20 and previous versions also mus...
Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting Information Leakage
Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting Information Leakage Exploit Title: Persistent XSS, Information Leakage IDS / IPS Google Dork: intitle: Persistent XSS, Information Leakage IDS / IPS Date: 2015-07-25 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor...
Hawkeye-G 3.0.1.4912 Cross Site Scripting / Information Leakage
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-HAWKEYEG0725.txt Vendor: ================================ www.hexiscyber.com Product: ================================ Hawkeye-G v3.0.1.4912 Hawkeye G is an active defense...
Hawkeye-G 3.0.1.4912 - Persistent Cross-Site Scripting / Information Leakage
Exploit Title: Persistent XSS, Information Leakage IDS / IPS Google Dork: intitle: Persistent XSS, Information Leakage IDS / IPS Date: 2015-07-25 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.hexiscyber.com Software Link:...
Orchard CMS 1.7.31.8.21.9.0 - Persistent Cross-Site Scripting
Orchard CMS 1.7.31.8.21.9.0 - Persistent Cross-Site Scripting ----------------- Background ----------------- Orchard is a free, open source, community-focused content management system written in ASP.NET platform using the ASP.NET MVC framework. Its vision is to create shared components for...
Coremail邮箱APP持久XSS
简要描述： 屌丝怎么活，上大学了，没手机没电脑，伤心啊⊙.⊙ 详细说明： 顺手搞搞APP，发现APP大概没被关注到，所以问题还很低级。 1 为了方便收发邮件下载了Coremail的APP（测试于ios版本） 2 测试发现APP上近乎不设防，除了直接源码插入的alert1没触发，像之类的都可以触发 3 虽然没有作用域，但毕竟正文直接触发，还是可以干很多坏坏的事情。 况且作为网易什么乱七八糟双重资质认证，安全性较高的邮箱，这样是不是不好，我怎么敢放心用这个APP呢 漏洞证明：...
Novius 5.0.1 - Multiple Vulnerabilities
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt Vendor: ======================= community.novius-os.org Product: =============================================================== novius-os.5.0.1-elche is a PHP...
NewStatPress <= 1.0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
An insufficient user input validation of HTTP-Header: "Referer" results in a persistent XSS in the WordPress admin-panel. An attacker may be able to access any cookies, session tokens or other sensitive information retained by the browser and used with that site...
GetSimple CMS 5.7.3.1 Cross Site Scripting
Date: 29/06/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: Persistent XSS Tested on: Windows 7 Product: GetSimple CMS Version: 5.7.3.1 Description: Application is vulnerable to Persistent XSS attack on page - URL -...
Novius OS 5.0.1-elche XSS / LFI / Open Redirect
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NOVIUSOS0629.txt Vendor: ======================= community.novius-os.org Product: =============================================================== novius-os.5.0.1-elche is a PHP...
Nakid-CMS CSRF, Persistent XSS & LFI
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NAKIDCMS0611.txt Vendor: ================================ http://kilrizzy.github.io/Nakid-CMS/ Product: ================================ kilrizzy-Nakid-CMS-f274624 Nakid CMS is...
ZCMS SQL Injection & Persistent XSS
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-ZCMS0612.txt Vendor: ============================================= http://zencherry.com/ http://sourceforge.net/projects/zencherrycms Product:...