freediscussionforums 1.0 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : FreeDiscussionForums Multiple Remote...

freediscussionforums 1.0 - Multiple Vulnerabilities

freediscussionforums 1.0 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory...

Mainely Newspaper CMS Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================== Mainely Newspaper CMS Persistent XSS Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

DMXReady Secure Document Library Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================================= DMXReady Secure Document Library Persistent XSS Vulnerability =============================================================...

Wordpress Events Manager Extended Plugin Persistent XSS Vulnerability

Exploit for php platform in category web applications ===================================================================== Wordpress Events Manager Extended Plugin Persistent XSS Vulnerability ===================================================================== Author: Craw Email: email protect...

Wordpress Events Manager Extended Plugin Persistent XSS Vulnerability

No description provided by source. Author: Craw Email: [email protected] Software Link: http://wordpress.org/extend/plugins/events-manager-extended/ Version: 3.1.2 Category: webapplications ======================================================= + ExploiT 1 : If you are allowed to leave a comment:...

Month Of Abysssec Undisclosed Bugs - IfNuke 4.0.0 XSS / Shell Upload

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | img634150553723437500.aspx That 634150553723437500 value is DateTime.Now.Ticks.ToString and will be built in this file : http://Example.com/Modules/PreDefinition/PhotoUpload.ascx.cs Ln 102 : fileName = "img" +...

Joomla com_adagency Persistent Xss Vulnerability

Exploit for php platform in category web applications ================================================ Joomla comadagency Persistent Xss Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ ...

mBlogger 1.0.04 Cross Site Scripting

!/usr/bin/python Exploit Title: mBlogger v1.0.04 addcomment.php Persistent XSS Exploit Date : 04 September 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/mblogger/ Version : 1.0.04 Tested on : EasyPHP 5.3.1....

Joomla com_ijoomla_rss Persistent Xss Vulnerability

Exploit for php platform in category web applications ==================================================== Joomla comijoomlarss Persistent Xss Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

WordPress Events Manager Extended Plugin - Persistent XSS Vulnerability

There is a vulnerability in Events Manager Extended plugin such as persistent XSS vulnerability in this case you can inject Javascript Code in your comment. Solution Update the plugin...

DMXReady Members Area Manager Persistent XSS Vulnerability

Exploit for asp platform in category web applications ========================================================== DMXReady Members Area Manager Persistent XSS Vulnerability ==========================================================...

ifnuke - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | img634150553723437500.aspx That 634150553723437500 value is DateTime.Now.Ticks.ToString and will be built in this file : http://Example.com/Modules/PreDefinition/PhotoUpload.ascx.cs...

Joomla Appointment Calendar Persistent Xss Vulnerability

Exploit for php platform in category web applications ======================================================== Joomla Appointment Calendar Persistent Xss Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

IfNuke Multiple Remote Vulnerabilities

Exploit for asp platform in category web applications ====================================== IfNuke Multiple Remote Vulnerabilities ====================================== Title : IfNuke Multiple Remote Vulnerabilities Affected Version : IfNuke 4.0.0 Discovery : www.abysssec.com Vendor :...

mBlogger 1.0.04 (addcomment.php) Persistent XSS Exploit

Exploit for python platform in category web applications ======================================================= mBlogger 1.0.04 addcomment.php Persistent XSS Exploit ======================================================= !/usr/bin/python Exploit Title: mBlogger v1.0.04 addcomment.php Persistent...

mBlogger 1.0.04 - addcomment.php Persistent Cross-Site Scripting

mBlogger 1.0.04 - addcomment.php Persistent Cross-Site Scripting !/usr/bin/python Exploit Title: mBlogger v1.0.04 addcomment.php Persistent XSS Exploit Date : 04 September 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link:...

uchome 2.0 存在持久XSS漏洞

看源码分析的，出错位置较敏感，而且基本没有利用限制，个人主页自定义风格时，可@import外部css文件 uchome 2.0 临时解决方法： implode应该是import的笔误 /expression|vbscript|javascript|import/i 以下在uchome 简体utf-8 2.0测试IE6,IE7,IE8通过. @import urlhttp://xxx.com/1.css; 包含远程css文件，可以在1.css中写入XSS利用. 分析代码 cptheme.php 92行17行调用 function checksecurity$str...

Easypush Server Manager Persistent Xss Vulnerability

No description provided by source. Name : Easypush Server Manager Persistent Xss Vulnerability Date : Sept,1 2010 Vendor Url : http://deeproot.in/ Author : Sid3^effects aKa HaRi shellc99atyahoo.com Big hugs : Th3 RDX,Hananbutt special thanks to : r0073r inj3ct0r.com,L0rd...

Month Of Abysssec Undisclosed Bugs - Rainbow Portal 2.0

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' abysssec Inc Public Advisory 1 Advisory information Title : Rainbowportal Multiple Remote Vulnerabilities Version : Rainbow 2.0 Production/Stable 2.0.0.1881e VS 2005 | VS...