Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

Joomla! Component com_joomdocs - Cross-Site Scripting

Date : june, 18 2010 Vendor url :http://www.axxis.gr/ Critical Level : HIGH Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,gunslinger greetz to :All ICW members and my friends : luv y0 guyz Description: Super Messenger allows users of your...

Havij 1.10 - Persistent Cross-Site Scripting

Havij 1.10 - Persistent Cross-Site Scripting Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By : Hkhexon...

Hexjector 1.0.7.2 - Persistent Cross-Site Scripting

Exploit Title: Hexjector Persistent XSS ".""; $url2 is not filtered so XSS codes can be executed. You would need to find a site that is vulnerable either to XSS or SQL Injection to generate this vulnerability.A site that is vulnerable to XSS only will also work because my Hexjector will not stop...

IP.Board (IPB) 3.0.x Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================= IP.Board IPB 3.0.x Persistent XSS Vulnerability ================================================= Date: 05/14/2010 Author: Cryptovirus Software Link: http://community.invisionpower.com/ Version...

Tumblr.com Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

Joomla Component com_frontpage Persistent XSS Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comfrontpage Persistent XSS Vulnerability =========================================================== +Title Joomla Component comfrontpage Persistent XSS Vulnerabilit...

Friendster.com Cross Site Scripting

================================================================================================== $$$$$$$\ $$\ $$\ $$\ $$$$$$\ $$ $$\ | $$ | $$ | $$ $$\ $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | $$$$$$$\ |$$ |$$ |$$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ $$\ $$ |...

DBHcms 1.1.4 - Persistent Cross-Site Scripting

DBHcms 1.1.4 - Persistent Cross-Site Scripting Title: DBHcms 1.1.4 Stored XSS Vendor: http://www.drbenhur.com Dork: "powered by DBHcms" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory:...

DBHcms 1.1.4 - Persistent Cross-Site Scripting

Title: DBHcms 1.1.4 Stored XSS Vendor: http://www.drbenhur.com Dork: "powered by DBHcms" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability50.htm Thanks: r3dm0v3...

ASPCode CMS 1.5.8 - Multiple Vulnerabilities

ASPCode CMS 1.5.8 - Multiple Vulnerabilities Multiple Vulnerability in ASPCode CMS Software Version: yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS";...

New-CMS - Multiple Vulnerabilities

New-CMS - Multiple Vulnerabilities Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com...

New-CMS v1.08 Multiple Vulnerability

Exploit for php platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category:...

osCommerce 3.0a5 Cross Site Request Forgery / Cross Site Scripting / Local File Inclusion

Multiple Vulnerabilities in osCommerce Vendor SW: osCommerce Version: 3.0a5 but possible all versions Vendor URL: www.oscommerce.com Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 30 Apr 2010 Author: Alberto Fontanella Author WEB: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it...

ASPCode CMS <= v1.5.8 Multiple Vulnerabilities

Exploit for asp platform in category web applications ============================================== ASPCode CMS yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS";...

New-CMS - Multiple Vulnerabilities

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

ASPCode CMS 1.5.8 - Multiple Vulnerabilities

Multiple Vulnerability in ASPCode CMS Software Version: yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS"; http://host/default.asp?sec=1&ma2="alert"XSS"; XSS found also on Form to reset...

Ning.com Cross Site Scripting

|=================================================================================================| | | | /\ \ /\ \ /\ /\ \ /\ \ /\ \ | | /::\ \ /::\ \ /::| | /\ \ /::\ \ /::\ \ /::\ \ | | /:/:\ \ /:/:\ \ /:|:| | :\ \ /:/:\ \ /:/:\ \ /:/:\ \ | | /:/ :\ \ /:/ :\ \ /:/|:| | /::\ /::\:\ ...

Edimax AR-7084GA Cross Site Request Forgery / Cross Site Scripting

25 die"One or more of the parts can't be longer then 25 characters!"; $url="http://".$SERVER"SERVERNAME".$SERVER"REQUESTURI"; for$i=1; $i'; die; else $time=$GET"time"; $script=$GET"script"; ? /Forms/advnatvirsvr1" name="VIRTUALSVR...

Edimax AR-7084GA Router CSRF + Persistent XSS Exploit

Exploit for hardware platform in category web applications ===================================================== Edimax AR-7084GA Router CSRF + Persistent XSS Exploit ===================================================== 25 die"One or more of the parts can't be longer then 25 characters!";...