Blackcat CMS 1.2 Cross Site Scripting

Exploit Title : Blackcat CMS XSS Vulnerability Date: 21/June/2017 Exploit Author: Faiz Ahmed Zaidi Organization: Provensec LLC Website: http://provensec.com/ Vendor Homepage: https://blackcat-cms.org/ Software Link: https://blackcat-cms.org/page/download.php Version: blackcatcmsv1.2Bundle Tested...

Black Cat CMS 1.1.2 Cross Site Scripting

​ Affected software: black cat cms Type of vulnerability:stored xss URL:http://blackcat-cms.org/ Discovered by: provensec Website: provensec.com version:BlackCat CMS 1.1.2 Proof of concept​ goto ad group page http://demo.opensourcecms.com/blackcat/backend/groups/index.php and and new group with...

Zurmo CRM 3.0.2 Cross Site Scripting

​ Affected software: zurmo crm Type of vulnerability:xss stored URL:zurmo.com http://demo.zurmo.com/ Discovered by: provensec Website: provensec.com version:N/A Proof of concept​ goto profile section http://demo.zurmo.com/demos/stable/app/index.php/home/default and edit the whats going on field...

PHPWCMS 1.5.4 Cross Site Request Forgery

​ Affected software: phpwcms Type of vulnerability:csrf URL:http://www.opensourcecms.com/demo/2/54/phpwcms Discovered by: provensec Website: provensec.com version:1.5.4 Proof of concept no csrf protections were used on directory creation page ​...

Paperlink Balance 710 Cross Site Request Forgery

​​ Affected software: paperlink balance 710 Type of vulnerability:csrf URL:peplink.com Discovered by: provensec Website: provensec.com version:710 Proof of concept​ a new manager can be added using csrf attack ​...

Gargoyle 1.5.x Command Execution

Affected software: Gargoyle router management utility Type of vulnerability:code execution URL:http://www.gargoyle-router.com/ Discovered by: provensec Website: provensec.com version:1.5.X Built 20140215-1506 git@505e8dc Proof of concept vulnerable paramter= "commands"' POST /utility/runcommands....

Vevocart 6.1.0 Open Redirect

Affected software: vevocart Type of vulnerability:url redirection URL:vevocart.com Discovered by: provensec Website: provensec.com version:VevoCart 6.1.0 Proof of concept http://multistore1.vevocart.com/admin/Login.aspx?ReturnUrl=%2f%2fgoogle.com...

SolarWinds Network Performance Monitor Open Redirect

Affected software: SolarWinds Network Performance Monitor Type of vulnerability:url redirection URL:http://www.solarwinds.com/ Discovered by: provensec Website: provensec.com version:N/A Proof of concept http://oriondemo.solarwinds.com/Orion/Login.aspx?ReturnUrl=//google.com...

Simple Invoice 2011 Cross Site Scripting

Affected software: simple invoice Type of vulnerability:stored xss URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011 Proof of concept goto http://demo.simpleinvoices.org/index.php?module=paymenttypes&view=manage add new or edit some older payment type and fill th...

Simple Invoice 2011.1 Cross Site Request Forgery

Affected software: simple invoice Type of vulnerability:adding admin user via csrf URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011.1 Proof of concept...

n2cms 2.2.1 Path Disclosure

Affected software: n2cms Type of vulnerability:full path disclosure URL:n2cms.com Discovered by: provensec Website: provensec.com version: 2.2.1 Proof of concept http://demo.n2cms.com/N2/Files/FileSystem/File.aspx?selected=%2fupload%2f%22%3E%3Cimg%20src=d%20onerror=confirm1;%3E1.php%2f manipulati...

Koala Framework 3.7 Cross Site Scripting

Affected software: koala-framework Type of vulnerability:xss URL:koala-framework.org Discovered by: provensec Website: provensec.com version: Version 3.7 Proof of concept http://cms-demo.koala-framework.org/admin/component/preview/?url=javascript:alert1...

BigAce CMS 3.0 Cross Site Scripting

Affected software: bigace cmc Type of vulnerability:cross site scripting URL:http://demo.bigace.de/ Discovered by: provensec Website: provensec.com version: 3.0 Proof of concept http://site/xsspayload demo:http://demo.bigace.de/%22%3E%3Cimg%20src=d%20onclick=confirm%281%29;%3E...

gpEasy CMS 4.4 Cross Site Scripting

Affected software: gpeasy cms Type of vulnerability:stored xss URL:gpeasy.com Discovered by: provensec Website: provensec.com version: gpEasy 4.4 Proof of concept goto edit layout and fill filed with xss payload " and save it javascript will execute --20cf303f64d02dcd89051578f782 Content-Type:...

AdaptCMS 3.0 Cross Site Scripting

Affected software: adaptcms Type of vulnerability:xss URL:adaptcms.com Discovered by: provensec Website: provensec.com version: AdaptCMS 3.0 Proof of concept goto site/category/ add new category with xss payload " open category and javascript will execute...

FlatPress 1.0 Cross Site Scripting

Affected software: FlatPress 1.0 Type of vulnerability:stored xss URL:http://www.opensourcecms.com/scripts/details.php?scriptid=77&name=FlatPress Discovered by: provensec Website: provensec.com version: FlatPress 1.0 Proof of concept adding a new entry with xss payload will lead to stored cross...

log2space 6.2 Cross Site Scripting

Affected software: log2space Type of vulnerability:xss URL:http://www.spacecom.co.in/ Discovered by: provensec Website: provensec.com version: 6.2 Proof of concept http://host/cgi/transerr.php?pagePop=popup&errMsg=%22%3E%3Cimg%20src=d%20onerror=confirm1;%3E...

Jaws 1.1.1 Cross Site Request Forgery

Affected software: Jaws cms Type of vulnerability:csrf URL:http://www.opensourcecms.com/scripts/details.php?scriptid=38&name=Jaws Discovered by: provensec Website: provensec.com version: Jaws 1.1.1 Proof of concept Jaws...

Pimcore CMS 3.0.5 Cross Site Request Forgery

Affected software: pimcore cms Type of vulnerability:csrf URL:pimcore.org Discovered by: provensec Website: provensec.com version: Version: 3.0.5 Build: 3468 Proof of concept no csrf token on add dashboard form...

Hippo CMS 7.9.7 Enterprise Edition CRLF Injection

Affected software: hippo cms Type of vulnerability:crlf URL:https://cms.demo.onehippo.com Discovered by: provensec Website: provensec.com version: CMS 7.9.7 Enterprise Edition Proof of concept payload : advanced%0d%0aContent-Length:%200%0d%0a%0d%0aHTTP/1.1%20200%20OK%0d%0aContent-...