Achievo 1.4.5 Cross Site Scripting

Exploit Title: Achievo Cross Site Scripting vulnerability Vendor: www.achievo.org Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=98 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-2016 Cross Site scripting link:...

Disc ORGanizer (DORG) - Multiple Vulnerabilities

Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=479 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-2016 SQL Injection: link:...

DORG Cross Site Scripting / SQL Injection

Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=479 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-2016 SQL Injection: link:...

Disc ORGanizer (DORG) - Multiple Vulnerabilities

Disc ORGanizer DORG - Multiple Vulnerabilities Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=479 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 20-3-20...

Disc ORGanizer - DORG - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: DORG - Disc Organization System SQL Injection And Cross Site Scripting Software Link: http://www.opensourcecms.com/scripts/details.php?scriptid=479 Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date:...

Magento Server MAGMI Plugin Local File Inclusion / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting Software Link: http://sourceforge.net/projects/magmi/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 5-2-2015 ExploitLoca...

Magento Server MAGMI Plugin - Multiple Vulnerabilities

Magento Server MAGMI Plugin - Multiple Vulnerabilities Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting Software Link: http://sourceforge.net/projects/magmi/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 5-2-2015 ExploitLoc...

Magento Server MAGMI Plugin - Multiple Vulnerabilities

Exploit Title: Magento Server MAGMI Plugin Local File Inclusion And Cross Site Scripting Software Link: http://sourceforge.net/projects/magmi/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 5-2-2015 ExploitLocal file inclusion :...

WebGUI 7.10.29 Cross Site Scripting

Exploit Title: WebGUI 7.10.29 stable version Cross site scripting vulnerability Software Link: http://www.webgui.org/download Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 17-1-2015 Version: 7.10.29. Previous version maybe vulnerable also. Vulnerable area:...

WordPress Frontend Uploader 0.9.2 Cross Site Scripting

Exploit Title: Wordpress Frontend Uploader Cross Site ScriptingXSS Software Link: https://wordpress.org/plugins/frontend-uploader/ Author: SECUPENT Website:www.secupent.com Email: researchatsecupentdotcom Date: 27-12-2014 Version: 0.9.2 Exploit :...

Pina CMS - Multiple Vulnerabilities

No description provided by source. Title: Pina CMS SQL Injection and XSS Vulnerabilities Vendor: www.pinacms.com Vendor Notified: 15-02-2014 Vendor Replied: 16-02-2014 Release in Public: 18-02-2014 Tested on: Windows/Linux Author/Found by: Shadman Tanjim Website: www.secupent.com and...

Pina CMS 'search'表单跨站脚本漏洞

Bugtraq ID:65672 Pina CMS是一款内容管理系统。 Pina CMS不正确过滤用户提交的搜索表单数据，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 Pina CMS 1.4 目前没有详细解决方案提供： http://www.pinacms.com/ Title: Pina CMS SQL Injection and XSS Vulnerabilities Vendor: www.pinacms.com Vendor Notified: 15-02-2014 Vendor Replied:...

Pina CMS - Multiple Vulnerabilities

Pina CMS - Multiple Vulnerabilities Title: Pina CMS SQL Injection and XSS Vulnerabilities Vendor: www.pinacms.com Vendor Notified: 15-02-2014 Vendor Replied: 16-02-2014 Release in Public: 18-02-2014 Tested on: Windows/Linux Author/Found by: Shadman Tanjim Website: www.secupent.com and...

Pina CMS - Multiple Vulnerabilities

Title: Pina CMS SQL Injection and XSS Vulnerabilities Vendor: www.pinacms.com Vendor Notified: 15-02-2014 Vendor Replied: 16-02-2014 Release in Public: 18-02-2014 Tested on: Windows/Linux Author/Found by: Shadman Tanjim Website: www.secupent.com and www.vulnerability.io Email: [email protected]...

Pina CMS Cross Site Scripting / SQL Injection

Title: Pina CMS SQL Injection and XSS Vulnerabilities Vendor: www.pinacms.com Vendor Notified: 15-02-2014 Vendor Replied: 16-02-2014 Release in Public: 18-02-2014 Tested on: Windows/Linux Author/Found by: Shadman Tanjim Website: www.secupent.com and www.vulnerability.io Email: [email protected]...