Useresponse <= 1.0.2 Privilege Escalation & RCE Exploit

Exploit for php platform in category web applications !/usr/bin/python -------------------- | abuseresponse.py | -------------------- Useresponse = 1.0.2 privilege escalation & remote code execution exploit vendor: USWebStyle http://www.uswebstyle.com/ software: http://www.useresponse.com/ vulns...

vanilla kpoll plugin 1.2 - Persistent Cross-Site Scripting

Title: Vanilla kPoll 1.2 Stored XSS Date: 5/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 + Vanilla kPoll 1.2 http://vanillaforums.org/download http://vanillaforums.org/addon/kpoll-plugin To Create the XSS go to this lin...

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post you...

Vanilla Forums 2.0.18.4 - Tagging Persistent Cross-Site Scripting

Title: Vanilla Tagging Stored XSS Date: 1/6/12 Author: Henry Hoggard Author URL: henryhoggard.co.uk Author Twitter: @henryhoggard Software: Vanilla Version 2.0.18.4 http://vanillaforums.org/download Create a new thread and post your XSS as tag. I used alert'xss' You will have to use a proxy /...

vBshop - Multiple Persistent Cross-Site Scripting Vulnerabilities

vBshop - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit Title: vBshop persistent XSS 0day Google Dork: "DragonByte Technologies Ltd" vbshout Date: 25/3/2012 9:32 PM EST Author: ToiL Software Link: http://www.dragonbyte-tech.com/ Version: all Tested on: all CVE : XSS Greeting fro...

osCommerce 3.0.2 - Persistent Cross-Site Scripting

osCommerce 3.0.2 - Persistent Cross-Site Scripting Title: ====== OSCommerce v3.0.2 - Persistent Cross Site Vulnerability Date: ===== 2012-02-02 VL-ID: ===== 407 Introduction: ============= osCommerce is the leading Open Source online shop e-commerce solution that is available for free under the G...

Sphinx Mobile Web Server <= 3.1.2.47 Multiple XSS Vulnerabilities - Active Check

Sphinx Mobile Web Server is prone to persistent cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PragmaMX 1.2.10 - Persistent Cross-Site Scripting

PragmaMX 1.2.10 - Persistent Cross-Site Scripting TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org...

PragmaMX 1.2.10 - Persistent Cross-Site Scripting

TITLE ... Persistent XSS in PragmaMX 1.12.0 for logged in users DATE .... 30.01.2012 .......................................... AUTOHR .. http://hauntit.blogspot.com ................ SOFT LINK http://www.pragmamx.org ............................. VERSION . 1.12.0...

WordPress <= 3.3.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Trustwave's SpiderLabs Security Advisory TWSL2012-002: Multiple Vulnerabilities in WordPress Published: 1/24/12 Version: 1.0 Vendor: WordPress http://wordpress.org/ Product: WordPress Version affected: 3.3.1 and prior Product description:...

Netlog Social - Persistent Cross Site Scripting Vulnerability

Document Title: =============== Netlog Social - Persistent Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=345 Release Date: ============= 2011-12-24 Vulnerability Laboratory ID VL-ID: ==================================...

WordPress Redirection 2.2.9 Persistent Cross Site Scripting

No description provided by source. Title: Wordpress Redirection Plugin =2.2.9 Lazy XSS Date: 2011-10-05 Author: dotxed dotxedatgooglemail.com @dotxed Software Link: http://wordpress.org/extend/plugins/redirection/ Version: 2.2.9 tested ----------------------- Info ----------------------- One...

WordPress Redirection 2.2.9 Persistent Cross Site Scripting

Title: Wordpress Redirection Plugin alert1 to place your XSS inside the blog backend. ----------------------- Fix ----------------------- After contacting the writer of this plugin, he rolled out a new version. Version 2.2.10 is not affected by these XSS issues. More information can be seen on...

network tracker .95 - Persistent Cross-Site Scripting

network tracker .95 - Persistent Cross-Site Scripting Exploit Title: Network Tracker .95 Stored XSS Date: 08-18-2011 Author: G13 Software link: http://networktracker.org/ Version: .95 ISSUE The application contains a option which allows anyone to create a user. If this option is left enabled an...

Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting (Admin Panel)

Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting Admin Panel Exploit Title: Fire Soft Board alertdocument.cookie popup with your cookies :- Fix : upgrade to last release 2.0.2 -= Greatz to x =-...

WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)

WeBid 1.0.2 - Persistent Cross-Site Scripting via SQL Injection Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP...

WeBid 1.0.2 - Persistent Cross-Site Scripting (via SQL Injection)

Exploit Title: presistent XSS through SQLi WeBid 1.0.2 Google Dork: "powered by WeBid" Date: 15-06-2011 Author: Saif El-Sherei Software Link: http://sourceforge.net/projects/simpleauction/ Version: 1.0.2 Tested on: Firefox 4, XAMPP Info: Open source php/mysql fully featured auction script. Perfec...

Apache Archiva < 1.3.5 Multiple Vulnerabilities

According to its self-reported version, the instance of Apache Archiva hosted on the remote web server is earlier than 1.3.5 and thus is affected by multiple persistent and reflective cross-site scripting and cross-site request forgery vulnerabilities. If an attacker can trick a user of the...

eyeos 1.9.0.2 - Persistent Cross-Site Scripting Using Image Files

Title: eyeOS alert"XSS done"; - Risks and consequences: Malicious users can inject code inside image files malware, browser exploits, etc... to attack other users and compromise the whole system via shared files or internal messages. - Mitigations: Disallow public dirs. Avoid work with images. -...

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities

DoceboLms 4.0.4 - Multiple Persistent Cross-Site Scripting Vulnerabilities DoceboLMS 4.0.4 Multiple Stored XSS Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; input type="hidden" name="authentic...