Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities

Amiro.CMS 5.8.4.0 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/42908/info Amiro.CMS is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful...

HP Insight Diagnostics Online Edition 8.4 - globals.php?tabpage Cross-Site Scripting

HP Insight Diagnostics Online Edition 8.4 - globals.php?tabpage Cross-Site Scripting source: https://www.securityfocus.com/bid/42888/info HP Insight Diagnostics Online Edition is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

CF Image Hosting Script 1.3.8 - Remote File Inclusion

================================= CF Image Hosting Script ===remote file inclode ================================= CF Image Hosting Script ===remote file inclode Date: 2010-08-29 Author : FoX HaCkEr Contact : [email protected] SiTe : www.sec4ever.com Download:...

Adobe Photoshop CS2 - Wintab32.dll DLL Hijacking

Adobe Photoshop CS2 - Wintab32.dll DLL Hijacking / Exploit Title: Adobe Photoshop CS2 DLL Hijacking Exploit Wintab32.dll Date: August 25, 2010 Author: storm [email protected] Version: CS2 9.0 - Other versions are very possibly exploitable too Tested on: Windows Vista SP2...

Kleeja Upload - Cross-Site Request Forgery (Change Admin Password)

Exploit Title: Kleeja Upload - CSRF Change Admin Password Date: 11-08-2010 Author: KOLTN & [email protected] Software Link: http://www.kleeja.com Software Download: http://www.kleeja.com/download/ Type : CSRF Version: all Version Greetz to : Juba & Mushii Exploit Change Admin Password...

wizmall 6.4 CSRF Vulnerabilities

Exploit for php platform in category web applications ================================ wizmall 6.4 CSRF Vulnerabilities ================================ Author: pyw1414 Software Link: http://www.shop-wiz.com/board/main/view/root/wizmall01/159/0 Version: 6.4 UTF-8 For php Tested on: XP SP3 -= CSRF...

Preation Eden Platform 27.7.2010 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/42321/info Preation Eden Platform is prone to multiple HTML-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow attacker-supplied...

FathFTP 1.8 Buffer Overflow

' Exploit Title: FathFTP 1.8 SEH ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1.7 : http://www.exploit-db.com/exploits/14269/ Thanks Blake ' Tested on: Windows XP SP3 FR / IE6 ' Visit : www.sec4ever.com...

eSmart-Vision Trading (g_details.php id) SQL Injection Exploit (.py)

Exploit for php platform in category web applications ==================================================================== eSmart-Vision Trading gdetails.php id SQL Injection Exploit .py ==================================================================== !/usr/bin/env python -- coding:utf-8 --...

Social Media v2.0.0 LFI Vulnerabilities

Exploit for php platform in category web applications ======================================= Social Media v2.0.0 LFI Vulnerabilities =======================================...

Impact Software AdPeeps - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42071/info Impact Software Ad Peeps is prone to multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content...

ECShop2. 5. x&2.6. x injection exploit-vulnerability warning-the black bar safety net

ECShop2. 5. x&2.6. x goodsscript.php no initialization SQL, leading to injection vulnerabilities Effect 2. 5. x and 2. 6. x,other versions not tested goodsscript. php44 line:injection / admin credentials disclosure exploit if emptyempty$GET'type' ... elseif $GET'type' == 'collection' ... $sql .=...

Freelancers Marketplace Script - Persistent Cross-Site Scripting

Freelancers Marketplace Script - Persistent Cross-Site Scripting Name : Freelancers Marketplace Script Persistent XSS Vulnerability Date : july 17,2010 Critical Level : HIGH vendor URL :http://www.guruscript.com/ google dork:Powered by Guruscript.com Author : Sid3^effects aKa HaRi special thanks ...

Cross-site Scripting (XSS) Vulnerabilities in Campsite

High-Tech Bridge SA Security Research Lab has discovered two vulnerabilities in Campsite which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in Campsite 1.1 The vulnerability exists due to input sanitation error in the "fcommentsearch"...

Whizzy CMS 10.01 - Local File Inclusion

Whizzy CMS 10.01 - Local File Inclusion x Type: Local File Inclusion x Vendor: Unverse.net x Script Name: Whizzy CMS x Script version: 10.01 x Author: Anarchy Angel x Mail : anarchydotang31@gmaildotcom Exploit: http://site.org/?LFI Ex: http://site.org/?../../../../../../../etc/passwd Special Tnx ...

ASX To MP3 Converter 3.1.2.1 SEH Exploit

Exploit Title: ASX to MP3 Converter v3.1.2.1 SEH Exploit Multiple OS, DEP and ASLR Bypass Date: July 13, 2010 Author: Node Software Link: http://www.mini-stream.net/downloads/ASXtoMP3Converter.exe Version: Mini-Stream Software ASX to MP3 Converter v3.1.2.1.2010.03.30 Evaluation Tested on: Windows...

Apple Mac OSX EvoCam Web Server (Snow Leopard) - ROP Remote Overflow

!/usr/bin/python EvoCam Web Server OSX 3.6.6 and 3.6.7 import socket import struct SHELL = "\xdb\xd2\x29\xc9\xb1\x27\xbf\xb1\xd5\xb6\xd3\xd9\x74\x24" "\xf4\x5a\x83\xea\xfc\x31\x7a\x14\x03\x7a\xa5\x37\x43\xe2" "\x05\x2e\xfc\x45\xd5\x11\xad\x17\x65\xf0\x80\x18\x8a\x71"...

cPanel 11.25 - Cross-Site Request Forgery (Add FTP Account)

Exploit Title: Cpanel 11.25 - CSRF Add FTP Account Author: G0D-F4Th3r Software Link: http://www.cpanel.net/ Version: 11.25 Exploit Greetz to : AL-MoGrM - dEvIL NeT - Bad hacker - v4-team members - And All My Friends...

Family Connections Who is Chatting AddOn - Remote File Inclusion

Family Connections Who is Chatting AddOn - Remote File Inclusion ======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability ======================================================= Author : lumut-- Script Details :...

ShopCartDx 4.30 Remote Blind SQL Injection Exploit

!/usr/bin/perl 0-Day ShopCartDx newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./products.php?cid=-1 OR 1!=SELECT...