Pluck CMS 4.7.3 - Multiple Vulnerabilities

Title: Pluck 4.7.3 - Multiple vulnerabilities Date: 28.08.15 Vendor: pluck-cms.org Affected versions: = 4.7.3 current Tested on: Apache2.2 / PHP5 / Deb32 Author: Smash | smaash.net Contact: smash at devilteam.pl Few vulnerabilities. Bugs: - local file inclusion - code execution - stored xss - csr...

Pluck CMS 4.7.3 - Multiple Vulnerabilities

Pluck CMS 4.7.3 - Multiple Vulnerabilities Title: Pluck 4.7.3 - Multiple vulnerabilities Date: 28.08.15 Vendor: pluck-cms.org Affected versions: = 4.7.3 current Tested on: Apache2.2 / PHP5 / Deb32 Author: Smash | smaash.net Contact: smash at devilteam.pl Few vulnerabilities. Bugs: - local file...

Pluck CMS 4.7.3 CSRF / XSS / LFI / Code Execution

Title: Pluck 4.7.3 - Multiple vulnerabilities Date: 28.08.15 Vendor: pluck-cms.org Affected versions: = 4.7.3 current Tested on: Apache2.2 / PHP5 / Deb32 Author: Smash | smaash.net Contact: smash at devilteam.pl Few vulnerabilities. Bugs: - local file inclusion - code execution - stored xss - csr...

Pluck 'albums_getimage.php' path traversal vulnerability

pluk is a simple PHP-based content management system. A directory traversal vulnerability exists in Pluck that allows remote attackers to submit a special directory traversal request to view the contents of system files with WEB privileges...

pluck CMS 4.7.2 Path Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: pluck CMS 4.7.2 Path Traversal Date: 21-05-2015 Software Link: http://www.pluck-cms.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description...

Pluck CMS 4.7.2 Directory Traversal

Exploit Title: pluck CMS 4.7.2 Path Traversal Date: 21-05-2015 Software Link: http://www.pluck-cms.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description When we use word thumb at the begining of $GET'image'...

Pluck 4.7 - Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: Pluck 4.7 Directory Traversal Google Dork: filetype:php inurl:"/data/modules/albums/albumsgetimage.php?image=" Date: 08/05/15 Exploit Author: Wadeek Vendor Homepage: http://www.pluck-cms.org/?file=home Software Link:...

Pluck CMS 4.7 - Directory Traversal

Pluck CMS 4.7 - Directory Traversal Exploit Title: Pluck 4.7 Directory Traversal Google Dork: filetype:php inurl:"/data/modules/albums/albumsgetimage.php?image=" Date: 08/05/15 Exploit Author: Wadeek Vendor Homepage: http://www.pluck-cms.org/?file=home Software Link:...

Pluck CMS 4.7 - Directory Traversal

Exploit Title: Pluck 4.7 Directory Traversal Google Dork: filetype:php inurl:"/data/modules/albums/albumsgetimage.php?image=" Date: 08/05/15 Exploit Author: Wadeek Vendor Homepage: http://www.pluck-cms.org/?file=home Software Link: http://www.opensourcecms.com/scripts/redirect/download.php?id=167...

Pluck CMS 4.5.2 - Multiple Local File Inclusion Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-037 Application: Pluck CMS Versions Affected: 4.5.2 Vendor URL: http://www.pluck-cms.org/ Bug: Multiple Local File Include Exploits: YES Reported: 28.07.2008 Vendor Response: 03.08.2008 Solution: YES Date...

Pluck 4.5.2 Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30542/info Pluck is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browse...

Pluck CMS 4.7 - HTML Code Injection

No description provided by source. Exploit Title: Pluck CMS CSRF - Injecting malicious contents to pagess Date: 2013 4 August Exploit Author: Yashar shahinzadeh Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://www.pluck-cms.org/ Tested on: Linux & Windows, PHP 5.2.9...

Pluck CMS 4.7 - HTML Code Injection

Exploit Title: Pluck CMS CSRF - Injecting malicious contents to pagess Date: 2013 4 August Exploit Author: Yashar shahinzadeh Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://www.pluck-cms.org/ Tested on: Linux & Windows, PHP 5.2.9 Affected Version : 4.7 Contacts:...

Pluck CMS 4.7 - HTML Code Injection

Pluck CMS 4.7 - HTML Code Injection Exploit Title: Pluck CMS CSRF - Injecting malicious contents to pagess Date: 2013 4 August Exploit Author: Yashar shahinzadeh Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://www.pluck-cms.org/ Tested on: Linux & Windows, PHP 5.2.9...

CVE-2012-0253

Multiple cross-site scripting XSS vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via 1 the jsonRequest parameter to Direct/Process, the 2 r or 3 cb parameter to Direct/jsonp.htm, or 4 the cb parameter to sys/jsonp.app/.ht...

CVE-2012-0253

Multiple cross-site scripting XSS vulnerabilities in Demand Media Pluck SiteLife before 5.0.13 allow remote attackers to inject arbitrary web script or HTML via 1 the jsonRequest parameter to Direct/Process, the 2 r or 3 cb parameter to Direct/jsonp.htm, or 4 the cb parameter to sys/jsonp.app/.ht...

CVE-2012-0253

Pluck SiteLife (Demand Media) prior to version 5.0.13 contains multiple XSS vulnerabilities exploitable via parameters jsonRequest, r, cb, and sys/jsonp.app/.htm, enabling arbitrary script/HTML injection. The issue affects Pluck SiteLife software and could lead to information leakage, privilege e...

Pluck SiteLife software multiple XSS vulnerabilities

Overview Pluck SiteLife software contains multiple XSS vulnerabilities. Description According to DemandMedia's website Pluck SiteLife software is an integrated community platform architected for brands. Pluck SiteLife software contains multiple cross site scripting XSS vulnerabilities. CWE-79:...

Pluck 4.7 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

pluck 4.7 CSRF edit index Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...