thegeneanddaveshow.com XSS vulnerability

Open Bug Bounty ID: OBB-48401 Description| Value ---|--- Affected Website:| thegeneanddaveshow.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Plogger Remote File Disclosure Vulnerability

No description provided by source. Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author: Mr.tro0oqy yemeni hacker email : [email protected] exp : Line 117: if $fpsource = @fopen$GET'src','rb'...

iManager Plugin 1.2.8 (lang) - Local File Inclusion Vulnerability

No description provided by source. iManager Plugin v1.2.8 lang Local File Inclusion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: = 1.2.8 Build 02012008 Summary: With iManager you can manage your files/images on your webserver, and it provide...

Joomla com_flexicontent远程代码执行漏洞

Joomla是一款内容管理系统。 该漏洞是包含在comflexicontent包中的phpthumb已知漏洞，参数被传递到“ImageMagickThumbnailToGD”时，在"SafeExec"函数被利用。 0 Joomla comflexicontent =2.1.3 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.joomla.org/ ---- POC: Windows-...

Joomla Flexicontent Remote Code Execution

Exploit Title: Joomla comflexicontent Remote Code Execution Release Date: 08/12/2013 Author: Deepankar Arora And Rafay Baloch Contact: http://rafayhackingarticles.net Vendor: http://www.flexicontent.org/ Versions Affected: 2.1.3Latest and earlier Google Dork: inurl:comflexicontent ---- Descriptio...

Joomla Flexicontent Remote Code Execution Vulnerability

Joomla Flexicontent component suffers from a code execution vulnerability due to the inclusion of phpthumb. Exploit Title: Joomla comflexicontent Remote Code Execution Release Date: 08/12/2013 Author: Deepankar Arora And Rafay Baloch Contact: http://rafayhackingarticles.net Vendor:...

phpThumb 1.7.12 Server Side Request Forgery

phpThumb 'phpThumbDebug' Server Side Request Forgery Google Dork: inurl:phpThumb.php Author: Rafay Baloch And Deepanker Arora Company: RHA InfoSEC Impact: High Vendor: http://phpthumb.sourceforge.net/download Version: 1.7.12 Status: Reported And Fixed =========== Description =========== A server...

PHPThumb - PHPThumb.php Arbitrary File Upload

PHPThumb - PHPThumb.php Arbitrary File Upload source: https://www.securityfocus.com/bid/64041/info phpThumb is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly validate file extensions before uploading them. An attacker may leverag...

PHPThumb - 'PHPThumb.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/64041/info phpThumb is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly validate file extensions before uploading them. An attacker may leverage this issue to upload arbitrary files to the...

phpThumb v. <= 1.7.9 Remote Command Injection Exploit

This code exploits a Remote Command Injection vulnerability in phpThumb that allows attackers to upload a shell automatically.. !/usr/bin/perl Exploit Title: phpThumb v. http://mobileworld24.pl/wp-content/themes/mobileworld24/inc/phpThumb/ use LWP::UserAgent; use HTTP::Request; $target = $ARGV0;...

Wordpress post-gallery Plugin Xss vulnerabilities

The Wordpress post-gallery Plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress post-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected]...

CVE-2012-2910

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

CVE-2012-2910

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

CVE-2012-2910

CVE-2012-2910 affects SiliSoftware phpThumb() version 1.7.11. The vulnerability is a cross-site scripting (XSS) flaw: remote attackers can inject arbitrary web script or HTML via the following user-supplied parameters in demo/phpThumb.demo.* scripts: (1) dir in phpThumb.demo.random.php and (2) ti...

PT-2012-4356

Name of the Vulnerable Software and Affected Versions SiliSoftware phpThumb version 1.7.11 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the dir parameter to "demo/phpThumb.demo.random.php" or the title parameter to...

CVE-2012-2910: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

SiliSoftware PHPThumb() 1.7.11-201108081537 - demoPHPThumb.demo.showpic.php?title Cross-Site Scripting

SiliSoftware PHPThumb 1.7.11-201108081537 - demoPHPThumb.demo.showpic.php?title Cross-Site Scripting source: https://www.securityfocus.com/bid/53572/info phpThumb is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

phpThumb() v1.7.11 (dir & title) Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications phpThumb v1.7.11 dir & title Cross-Site Scripting Vulnerability Vendor: SiliSoftware Product web page: http://www.silisoftware.com Affected version: 1.7.11-201108081537 Summary: phpThumb uses the GD library to create thumbnails from images JPE...

SiliSoftware phpThumb() 1.7.11 Cross Site Scripting

phpThumb v1.7.11 dir & title Cross-Site Scripting Vulnerability Vendor: SiliSoftware Product web page: http://www.silisoftware.com Affected version: 1.7.11-201108081537 Summary: phpThumb uses the GD library to create thumbnails from images JPEG, PNG, GIF, BMP, etc on the fly. The output size is...