Design/Logic Flaw

An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...

CVE-2019-7552

An issue was discovered in PHP Scripts Mall Investment MLM Software 2.0.2. Stored XSS was found in the the My Profile Section. This is due to lack of sanitization in the Edit Name section...

Design/Logic Flaw

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts...

CVE-2018-6180

A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password for other accounts...

CVE-2017-11182

Rise Ultimate Project Manager v1.8 contains cross-site scripting (XSS) vulnerabilities in the My Profile input fields. All input fields are vulnerable, enabling injection of arbitrary script/HTML. The CVE notes an XSS issue but does not provide exploitation status, impact depth beyond the stated ...

Zurmo CRM 3.0.2 Cross Site Scripting

​ Affected software: zurmo crm Type of vulnerability:xss stored URL:zurmo.com http://demo.zurmo.com/ Discovered by: provensec Website: provensec.com version:N/A Proof of concept​ goto profile section http://demo.zurmo.com/demos/stable/app/index.php/home/default and edit the whats going on field...

Beehive Forum 1.4.4 - Persistent Cross-Site Scripting

Beehive Forum 1.4.4 - Persistent Cross-Site Scripting Document Title: ============ Beehive Forum v1.4.4 Stored XSS Vulnerability Author: ============== Halil Dalabasmaz Release Date: =========== 23 Feb 2015 Product & Service Introduction: ======================== Beehive is an open-source project...

Cross site scripting

Cross-site scripting XSS vulnerability in Social Microblogging PRO 1.5 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI, related to the "Web Site" input in the Profile section...

Social Microblogging PRO 1.5 Cross Site Scripting

Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome & Iceweasel Vulnerability Description: ===Stored XSS=== "Web Site"...

Social Microblogging PRO 1.5 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome & Iceweasel...

Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting

Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome &...

Social Microblogging PRO 1.5 - Persistent Cross-Site Scripting

Exploit Title: Social Microblogging PRO 1.5 Stored XSS Vulnerability Date: 29-12-2014 Exploit Author: Halil Dalabasmaz Version: v1.5 Vendor Homepage: http://codecanyon.net/item/social-microblogging-pro/9217005 Tested on: Chrome & Iceweasel Vulnerability Description: ===Stored XSS=== "Web Site"...

clientResponse Client Management 4.1 - Cross-Site Scripting

clientResponse Client Management 4.1 - Cross-Site Scripting Exploit Title: clientResponse Client Management XSS Vulnerability Date: 14-10-2014 Exploit Author: Halil Dalabasmaz Version: v4.1 Vendor Homepage: http://codecanyon.net/item/clientresponse-responsive-php-client-management/3797780 Tested...

Serenity Client Management Portal 1.0.1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Serenity Client Management Portal Multiple Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.1 Software Link: http://codecanyon.net/item/serenity-client-management-portal/9136098 Software Test Link:...

Serenity Client Management Portal 1.0.1 Cross Site Scripting

Exploit Title: Serenity Client Management Portal Multiple Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.1 Software Link: http://codecanyon.net/item/serenity-client-management-portal/9136098 Software Test Link: http://www.zenperfectdesign.com/demo/serenity-cc/...

Serenity Client Management Portal Multiple Vulnerabilities

Serenity is a light-weight, PHP-based online client management application that is built for freelancers. Focused on the intimate relationship between freelancers and their clients, Serenity makes heavy use of the jQuery library and AJAX protocols to do powerful things with little effort and to...

Serenity Client Management Portal 1.0.1 - Multiple Vulnerabilities

Serenity Client Management Portal 1.0.1 - Multiple Vulnerabilities Exploit Title: Serenity Client Management Portal Multiple Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.1 Software Link: http://codecanyon.net/item/serenity-client-management-portal/9136098 Softwa...

Serenity Client Management Portal 1.0.1 - Multiple Vulnerabilities

Exploit Title: Serenity Client Management Portal Multiple Vulnerabilities Date: 08-10-2014 Exploit Author: Halil Dalabasmaz Version: v1.0.1 Software Link: http://codecanyon.net/item/serenity-client-management-portal/9136098 Software Test Link: http://www.zenperfectdesign.com/demo/serenity-cc/...