Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0_RC_2

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

JAF-CMS 4.0_RC_2 Cross Site Scripting

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

Multiple CSRF Vulnerabilities in Openfire 3.6.4 Administrative Section

Hi, This is regarding multiple CSRF Cross Site Request Forgery Vulnerabilities in Openfire 3.6.4 Administrative Section. The following is the disclosure document: Title: Multiple CSRF Vulnerabilities in Openfire 3.6.4 Administrative Section...

Skadate Multiple Persistent Cross Site Scripting Vulnerabilities (Undisclosed New Vulnerability)

Exploit Title: Skadate Persistent Cross Site Scripting Vulnerability Google Dork: Powered by SkaDate dating Date: 2 January 2011 Author: Akastep Software Link: http://www.skadate.com Version: SkaDate dating software Tested on: nginx/0.7.62 php version: PHP/5.2.14 ----- Exploit: Persistent Cross...

Low: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix one security issue and three bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Unfixed XSS vulnerability at www.releaseinfo.net

Security researcher nullbyt3, has submitted on 12/07/2010 a cross-site-scripting XSS vulnerability affecting www.releaseinfo.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is current...

Skeletonz CMS - Persistent Cross-Site Scripting

Skeletonz CMS - Persistent Cross-Site Scripting Exploit Title: Xss on skeletonz-simple dynamic cms in the section comments Google Dork: Date: 27/11/10 Author: Jordan Diaz aka Jbyte Software Link: http://orangoo.com/skeletonz/ Version: 1.0 Tested on: Windows xp CVE : The follow xss is located in t...

ClipShare Pro 4.1 Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================== ClipShare Pro 4.1 Persistent XSS Vulnerability ============================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: ClipShare Pro...

Micro CMS v1.0 b1 Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================== Micro CMS v1.0 b1 Persistent XSS Vulnerability ============================================== Class: Persistent Cross-Site Scripting Severity: High Overview: --------- Micro CMS is prone to...

VisualSite CMS 1.3 - Multiple Vulnerabilities

VisualSite CMS 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-25-visualsite-cms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : VisualSite...

VisualSite CMS 1.3 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-25-visualsite-cms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : VisualSite CMS Multiple Vulnerabilities Affected Version :...

FreeDiscussionForums v1.0 Multiple Remote Vulnerabilities

Exploit for asp platform in category web applications ========================================================= FreeDiscussionForums v1.0 Multiple Remote Vulnerabilities ========================================================= Title : FreeDiscussionForums Multiple Remote Vulnerabilities Affected...

freediscussionforums 1.0 - Multiple Vulnerabilities

freediscussionforums 1.0 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory...

freediscussionforums 1.0 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : FreeDiscussionForums Multiple Remote...

Mainely Newspaper CMS Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================== Mainely Newspaper CMS Persistent XSS Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

StandAloneArcade Script Persistent XSS Vulnerability

Exploit for php platform in category web applications ==================================================== StandAloneArcade Script Persistent XSS Vulnerability ==================================================== AUTHOR : Cur53D MAIL : Hyq6xxatgmail.com DATE : 20,August,2010 Blog :...

Important: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix three security issues and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Joomla EasyBlog Cross Site Scripting

Name : Joomla EasyBlog Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://stackideas.com/products/easyblog.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to...

CVE-2010-2680

Directory traversal vulnerability in the JExtensions JE Section/Property Finder jesectionfinder component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php...

CVE-2009-4934

Cross-site scripting XSS vulnerability in index.php in Online Photo Pro 2.0 allows remote attackers to inject arbitrary web script or HTML via the section parameter...