SchoolCMS Persistent XSS

No description provided by source. Title: SchoolCMS Persistant XSS. Date: 03/12/12 Author: VipVince Vendor: www.poweritschools.com Google Dork: /oldcore/cal/eventform.php Tested on: Windows. This is a Persistant XSS used in the software by many schools. About 225 results 0.21 seconds The...

Gitlab 6.0 - Persistent XSS

No description provided by source. Exploit-DB note: Tested commit 10b0b8f1797e6c09b4c063c04a4864ecd31d34f4 Exploit Title: gitlab persistent xss exploit Date: 12/16/2013 Exploit Author: hellok Vendor Homepage: gitlab.org !/bin/sh author hellok for file format ext pwn for gitlab 12/16/2013 tee...

Wordpress FuneralPress Plugin 1.1.6 - Persistent XSS

No description provided by source. WP FuneralPress - stored xss in guestbook FuneralPress is an online website obituary management and guest book program for funeral homes and cemeteries http://wpfuneralpress.com/ tested on: funeralpress version 1.1.6 / wordpress version 3.5.1 impact: malicious...

WORDPRESS Plugin Accept Signups 0.1 XSS

No description provided by source. Exploit Title: WORDPRESS Plugin Accept Signups PERSISTENT XSS Date:21/12/2010 Author: clshack Software Link:http://wordpress.org/extend/plugins/accept-signups/ Version:0.1 Tested on: wordpress 3.03 CVE : Vulnerable code accept-signupssubmit.php:...

Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability

No description provided by source. Title: ====== Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability Date: ===== 2013-06-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=970 VL-ID: ===== 970 Common Vulnerability Scoring System:...

Facebook for iPhone persistent XSS DoS

No description provided by source. Facebook for iPhone persistent XSS Facebook application for iPhone is not encoding special characters in Notes detail Adding this code in a note will freeze application: scriptvar x = 'x'; while 1 document.write'iframe src=tel:'+x+'/iframe'; x = x + 'x'; /script...

Joomla SocialAds Component com_socialads Persistent XSS Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comsocialads Persistent Xss Vulnerability Date : july 3,2010 Critical Level : HIGH vendor URL :http://techjoomla.com/...

Joomla Template BizWeb com_community Persistent XSS Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comcommunity Persistent Xss Vulnerability Date : june, 21 2010 Critical Level : HIGH Vendor Url : http://styleware.eu/...

Joomla Rapid Recipe Persistent XSS Vulnerability

No description provided by source. 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla Rapid Recipe Persistent XSS Vulnerability Date : july, 11 2010 Critical Level : HIGH Vendor Url :...

Link Protect 1.2 Persistent XSS Vulnerabilities

No description provided by source. Exploit Title: Link Protect 1.2 XSS Vulnerabilities Date: 11-29-2010 Author: Shichemt Alen Software Link: None Version: 1.2 Platform / Tested on: Windows XP SP2 DE & Ubuntu 10.10 category: webapps/0day Dork : inurl:sorry script'kiddies Contact :...

Ushahidi 2.2 - Multiple Vulnerabilites

No description provided by source. Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Fu...

White Label CMS 1.5 - CSRF & Persistent XSS

No description provided by source. Exploit Title: White Label CMS v 1.5 CSRF w/ persistent XSS Date: 21/10/2012 Exploit Author: pcsjj Vendor Homepage: http://www.videousermanuals.com/white-label-cms/ Version: 1.5 Software Link: http://plugins.svn.wordpress.org/white-label-cms/branches/ Downloads:...

socialengine 4.2.2 - Multiple Vulnerabilities

No description provided by source. Social Engine 4.2.2 Multiples Vulnerabilities Earlier versions are also possibly vulnerable. INFORMATION Product: Social Engine 4.2.2 Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Discovered by: Tiago Natel de Moura aka i4k Discovered at: 10/04/20...

Cells Blog CMS 1.1 - Multiple Web Vulnerabilites

No description provided by source. Title: ====== Cells Blog CMS v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-06-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=591 VL-ID: ===== 591 Common Vulnerability Scoring System: ==================================== 8.3...

OpenClassifieds 1.7.0.3 Chained: Captcha Bypass->SQLi->Persistent XSS on Frontpage

No description provided by source...

eFront 3.6.14.4 (surname param) - Persistent XSS Vulnerability

No description provided by source. ? Exploit Title: Persistent Cross Site Scripting Vulnerability in eFront 3.6.14.4 Date: 05 June 2014 Exploit Author: shyamkumar somana Vendor Homepage: http://www.efrontlearning.net Software Link:...

OTRS FAQ Module - Persistent XSS

No description provided by source. Exploit Title: OTRS Faq Module - Persistent XSS Date: 2-Apr-2013 Exploit Author: Luigi Vezzoso Vendor Homepage: http://www.otrs.com Version: OTRS ITSM 3.2.x,OTRS ITSM 3.1.x,OTRS ITSM 3.0.x Tested on: Perl CVE : CVE-2013-2637 OVERVIEW The OTRS ITSM FAQ Module 3.2...

Pulse Pro 1.4.3 Persistent XSS Vulnerability

No description provided by source. Exploit Title: Pulse Pro 1.4.3 Persistent XSS Vulnerability Date: 24-10-2010 Author: Th3 RDX Software Link: http://pulsecms.com/ Version: 1.4.3 Tested on: Demo Site category: webapp Code : n/a...

USB Sharp 1.3.4 iPad iPhone - Multiple Vulnerabilities

No description provided by source. Title: ====== USB Sharp v1.3.4 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-16 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=873 VL-ID: ===== 873 Common Vulnerability Scoring System:...

Hexjector <= 1.0.7.2 - Persistent XSS

No description provided by source. Exploit Title: Hexjector Persistent XSS =v1.0.7.2 Date: 25/5/2010 Author: Hexon Software Link: https://sourceforge.net/projects/hexjector/files/HexjectorWin32/Hexjector v1.0.7.2.zip/download Version: v1.0.7.2 and below Tested on: Windows XP SP2, Windows 7,Ubuntu...