498 matches found
Simple Posting System Final LFI/XSS/FPD Vulnerabilities
Simple Posting System suffers from multiple vulnerabilities including LFI/XSS/FPD +-- LFI --+ http://localhost/sps.php?old=../../../../../../../../../../../../../../../../../etc/passwd%00 +-- Persistent XSS --+ Vulnerable Field = "Homepage" Payload syntax: alert'XSS'; +-- FPD --+...
CVE-2012-6510
Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...
Unrestricted file upload
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the directory specified...
Unrestricted file upload
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the directory...
CVE-2012-1125
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the directory...
CVE-2012-1125
The Kish Guest Posting WordPress plugin vulnerability CVE-2012-1125 affects plugin versions prior to 1.2, where an unrestricted/arbitrary file upload occurs via uploadify.php. An attacker can upload a PHP-file and access it through the directory path specified by the folder parameter, enabling re...
CVE-2012-1125
Unrestricted file upload vulnerability in uploadify/scripts/uploadify.php in the Kish Guest Posting plugin before 1.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with a PHP extension, then accessing it via a direct request to the file in the directory...
CVE-2012-5318
The CVE-2012-5318 entry is confirmed with concrete details: it affects the Kish Guest Posting WordPress plugin (version 1.2) via an Unrestricted file upload in uploadify/scripts/uploadify.php. The vulnerability allows remote attackers to execute arbitrary code by uploading a file with a double ex...
WordPress Kish Guest Posting Plugin <= 1.2 - Unrestricted File Upload
Because of this vulnerability in uploadify/scripts/uploadify.php, the attackers can execute arbitrary code by uploading a file with a double extension. After that they access it via a direct request to the file in the directory specified by the "folder" parameter. Solution Update the plugin...
WordPress Kish Guest Posting 1.0 File Upload
File upload vulnerability in WordPress Kish Guest Posting plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Janetter vulnerable to cross-site request forgery
Overview Janetter contains a cross-site request forgery vulnerability. Janetter is a client software for using Twitter. Janetter contains a cross-site request forgery vulnerability. Kazuhiko Kusano of Graduate School of Information Sciences, Tohoku University reported this vulnerability to IPA...
Simple Posting System 1.0 Final Local File Inclusion
Exploit Title: Simple Posting System Multiple Google Dork: inurl:sps.php?old= or inurl:sps.php " Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...
XWiki Enterprise Multiple Cross-Site Scripting Vulnerabilities
The host is running XWiki Enterprise and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbxwikienterprisemultxssvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ XWiki Enterprise Multiple Cross-Site Scripting Vulnerabilities Authors: Rachana Shetty Copyright:...
Wordpress Kish Guest Posting Plugin 1.0 (uploadify.php) Unrestricted File Upload Vulnerability
-------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload -------------------------------------------------------------------------------- author............: Egidio Romano aka EgiX...
WordPress Kish Guest Posting 1.0 Shell Upload
?php / -------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload -------------------------------------------------------------------------------- author............: Egidio Romano aka EgiX...
WordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload
?php / -------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload -------------------------------------------------------------------------------- author............: Egidio Romano aka EgiX...
WordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload
WordPress Plugin Kish Guest Posting 1.0 - Arbitrary File Upload ?php / -------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload...
SA-CONTRIB-2011-028 - Simple Clean - Cross Site Scripting
Simple Clean is a simple and stripped clean theme for Drupal. The theme contains a cross site scripting XSS vulnerability that can be exploited when posting comments. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "post comments". Versions affect...
Discuz x 1.5 小松鼠(Discuz! X1.5 xss)
简要描述： 开发人员疏忽. 详细说明： 在发帖时输入imgjavascript:alert/sogili//img 漏洞证明： 自己去看咯...
Bs Scripts_Directory - SQL Injection / Authentication Bypass
1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...