Pligg 1.1.2 Cross Site Scripting / SQL Injection

Credit: Michael Brooks Bug Fix in 1.1.2: http://www.pligg.com/blog/1174/pligg-cms-1-1-2-release/ Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

OpenAuto 1.6.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS...

openauto 1.6.3 - Multiple Vulnerabilities

Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS by adding a onclick event handler...

openauto 1.6.3 - Multiple Vulnerabilities

openauto 1.6.3 - Multiple Vulnerabilities Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS by adding a...

Mura CMS 5.2.2085 Cross Site Scripting

ProCheckUp Research PR10-09 Multiple XSS and Cross Domain redirect within Mura CMS Advisory publicly released: Monday, 13 December 2010 Vulnerability found: Monday, 19 April 2010 Vendor informed: Tuesday, 20 April 2010 Severity level: Medium Credits Richard Brain of ProCheckUp Ltd...

NoScript可绕过 "Reflective XSS"检测漏洞

NoScript Firefox extension是一款免费的开源插件，提供对Firefox、Seamonkey和其他基于Mozilla浏览器的额外保护。 NoScript的实现上存在漏洞，远程攻击者可利用此漏洞绕过反射式XSS保护。 在通过SQLXSSI发动攻击时，NoScript未能从受信任的域中检测到反射式XSS。通过利用浏览器中的错误信息机制发动Union SQL投毒攻击而导致的“Reflective XSS”可成功地绕过NoScript。 NoScript NoScript 2.0.5.1 NoScript NoScript 2.0.6 厂商补丁： NoScript...

NoScript Cross Site Scripting Via SQL Injection

Hi List NoScript fails to detect the reflective XSS from trusted domains when an attack is conducted through SQLXSSI. The bypass in NoScript has been successfully conducted by using "Reflective XSS" through Union SQL poisoning attacks by exploiting the reverted errors in the browser. The attack...

chillyCMS Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: chillyCMS Multiple Vulnerabilities Vendor: http://frozenpepper.de/ Vulnerable Version: 1.1.3 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: chillyCMS is a Content Management System. Its main features are:...

ChillyCMS 1.1.3 - Multiple Vulnerabilities

ChillyCMS 1.1.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: chillyCMS Multiple Vulnerabilities Vendor: http://frozenpepper.de/ Vulnerable Version: 1.1.3 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: chillyCMS is a Content...

chillyCMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== chillyCMS 1.1.3 Multiple Vulnerabilities ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Joomla Listbingo 1.3 SQL Injection / Cross Site Scripting

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Joomla! Component comlistbingo 1.3 - Multiple Vulnerabilities Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL...

Joomla! Component com_listbingo 1.3 - Multiple Vulnerabilities

Exploit Title: Joomla Component Listbingo 1.3 Multiple Vulnerabilities Date: 09 June 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/ads-a-affiliates/classified-ads/12062 Version: 1.3 Tested on: PHP5, MySQL5 SQL Injection ------------- ?q=11111 &catid=0 &searchfromprice=99...

Windows Meterpreter (Reflective Injection), Windows Reverse HTTPS Stager (wininet)

Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Tunnel communication over HTTPS Windows wininet This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework modu...

Reflective DLL Injection, Reverse TCP Stager (DNS)

Inject a DLL via a reflective loader. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 321 include Msf::Payload::Stager include...

Windows Meterpreter (Reflective Injection), Reverse TCP Stager (DNS)

Inject the Meterpreter server DLL via the Reflective Dll Injection payload staged. Requires Windows XP SP2 or newer. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule...

VNC Server (Reflective Injection), Reverse TCP Stager (DNS)

Inject a VNC Dll via a reflective loader staged. Connect back to the attacker This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 321 include Msf::Payload::Stager include...

Silverstripe <= v2.3.4: XSS vulnerabilities

No description provided by source. Silverstripe CMS, http://silverstripe.org/, version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL'...

Silverstripe <= v2.3.4: two XSS vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, http://silverstripe.org/, version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the...

Silverstripe CMS 2.3.4 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Silverstripe CMS, , version 2.3.4 and lower and its unreleased 2.4 branch, is vulnerable to two Cross Site Scripting issues. 1. The comment posting mechanism of Silverstripe 'PostCommentForm' fails to properly sanitize the 'CommenterURL' parameter...