Open-Realty CMS 3.x | Persistent Cross Site Scripting (XSS) Vulnerability

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Persistent Cross Site Scripting XSS. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

MyBB Kingchat Cross Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...

Movable Type Pro 5.13en - Persistent Cross-Site Scripting

Movable Type Pro 5.13en - Persistent Cross-Site Scripting -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Source URL: http://www.cloudscan.me/2012/10/cve-2012-1503-movable-type-pro-513en.html Keywords: CVE-2012-1503, Movable Type Pro 5.13en, Stored XSS, JavaScript Injection, Vendor Unresponsive,...

WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS Date: 21/10/2012 Exploit Author: pcsjj Vendor Homepage: http://www.videousermanuals.com/white-label-cms/ Version: 1.5 Software Link: http://plugins.svn.wordpress.org/white-label-cms/branches/ Downloads: 110,313 CVE : CVE-2012-5387 CSRF,...

WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery Persistent Cross-Site Scripting

WordPress Plugin White Label CMS 1.5 - Cross-Site Request Forgery Persistent Cross-Site Scripting Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS Date: 21/10/2012 Exploit Author: pcsjj Vendor Homepage: http://www.videousermanuals.com/white-label-cms/ Version: 1.5 Software Link:...

SilverStripe 2.4.7 Cross Site Scripting

OVERVIEW SilverStripe 2.4.7 and lower versions are vulnerable to Persistent Cross Site Scripting. 2. BACKGROUND SilverStripe CMS is easy for both developers and content authors to work with. The SilverStripe Framework keeps the code tucked away neatly so that it can be accessed easily by...

uebimiau webmail 2.7.2 - Persistent Cross-Site Scripting

uebimiau webmail 2.7.2 - Persistent Cross-Site Scripting !/usr/bin/python ''' Exploit Title: Uebimiau Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.uebimiau.org/ Software Link: http://www.uebimiau.org/downloads/uebimiau-2.7.2-any.zip Version...

T-dah Webmail - Cross-Site Request Forgery Persistent Cross-Site Scripting

T-dah Webmail - Cross-Site Request Forgery Persistent Cross-Site Scripting ----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- T-dah Webmail CSRF &...

IlohaMail Webmail - Persistent Cross-Site Scripting

IlohaMail Webmail - Persistent Cross-Site Scripting !/usr/bin/python ''' Exploit Title: IlohaMail Webmail Stored XSS. Date: 18/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://sourceforge.net/projects/ilohamail/ Software Link:...

hastymail2 webmail 1.1 rc2 - Persistent Cross-Site Scripting

hastymail2 webmail 1.1 rc2 - Persistent Cross-Site Scripting !/usr/bin/python ''' Exploit Title: Hastymail2 Webmail Stored XSS Date: 17/08/2012 Exploit Author: Shai rod @NightRang3r Vendor Homepage: http://www.hastymail.org Software Link:...

emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting

emailarchitect enterprise email server 10.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: EmailArchitect Enterprise Email Server Version: 10.0 Vendor Site: http://www.emailarchitect.net Software Download Link:...

escon supportportal pro 3.0 - Persistent Cross-Site Scripting

escon supportportal pro 3.0 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: ESCON SupportPortal Pro Version: 3.0 Vendor Site: http://www.e-supportportal.com Software Download: http://www.e-supportportal.com/download.html Timeline: 29 May...

T-dah Webmail Client 3.2.0-2.3 - Persistent Cross-Site Scripting

T-dah Webmail Client 3.2.0-2.3 - Persistent Cross-Site Scripting !/usr/bin/python ''' Author: loneferret of Offensive Security Product: T-dah Webmail Client Version: 3.2.0-2.3 Vendor Site: http://t-dahmail.sourceforge.net/index.php Software Download: http://sourceforge.net/projects/t-dahmail/...

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting Blind SQL Injection Remote Code Execution

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting Blind SQL Injection Remote Code Execution / Exploit Title: Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE Date: Jul 22 2012 Author: muts Version: Ipswitch WhatsUp Gold 15.02 Vendor URL: http://www.ipswitch.com/ An attacker c...

gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting

gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting Exploit Title: gp easy CMS Minishop 1.5 plugin persistent XSS Date: july 2 2012 Exploit Author: Carlos Mario Penahos Hollmann Vendor Homepage:http://gpeasy.com/Download Software Link:...

gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting

Exploit Title: gp easy CMS Minishop 1.5 plugin persistent XSS Date: july 2 2012 Exploit Author: Carlos Mario Penahos Hollmann Vendor Homepage:http://gpeasy.com/Download Software Link: http://gpeasy.com/SpecialAddonPlugins?cmd=download&id=31 Version: 1.5 The vulnerable code is in the Minishop 1.5...

phpmoneybooks 1.03 - Persistent Cross-Site Scripting

phpmoneybooks 1.03 - Persistent Cross-Site Scripting Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link:...

Useresponse 1.0.2 - Privilege Escalation Remote Code Execution

Useresponse 1.0.2 - Privilege Escalation Remote Code Execution !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.co...