WordPress "st_newsletter" Plugin Arbitrary File upload

Exploit for php platform in category web applications IN THE NAME OF ALLAH Title : WordPress "stnewsletter" Plugin Arbitrary File upload By : Ashiyane Digital Security Team Google Dork : inurl:"wp-content/plugins/stnewsletter/visualeditors/fckeditor/editor/filemanager/upload/" Tested : Windows 7 ...

ComSndFTP Server Remote Format String Overflow Vulnerability

Title: ComSndFTP Server Remote Format String Overflow Vulnerability Software : ComSndFTP FTP Server Software Version : ComSndFTP 1.3.7 Beta Vendor: http://ftp.comsnd.com/ Vulnerability Published : 2012-06-07 Vulnerability Update Time : Status : Impact : MediumCVSS2 Base : 5.0,...

XM Easy Personal FTP Server 5.30 - Remote Format String Write4

XM Easy Personal FTP Server 5.30 - Remote Format String Write4 !/usr/bin/python XM Easy Personal FTP Server v = 5.30 Remote Format String write4 Exploit exploit by: mrme @netninja/mrmeatcorelan.be Thanks to the Corelan Security Team Note: this is a poc only, and requires the following target...

XM Easy Personal FTP Server 5.30 - Remote Format String Write4

!/usr/bin/python XM Easy Personal FTP Server v = 5.30 Remote Format String write4 Exploit exploit by: mrme @netninja/mrmeatcorelan.be Thanks to the Corelan Security Team Note: this is a poc only, and requires the following target environment: Windows Server 23k: - msvcrt.dll v7.0.3790.3959 -...

Dotcombinat SQL Injection

-------------------- IN The NAme OF God -------------------- -====Dotcombinat Remote Sql Injection Vulnerability====- Exploit Title: Dotcombinat Remote Sql Injection Vulnerability Exploit Author: Mr.XpR SCript Download : http://www.dotcombinat.net Tested on: BackTrack , 7 , Redhat MAil :...

Joomla Eslamiat SQL Injection

-------------------- IN The NAme OF God -------------------- -====Joomla comeslamiat Sql Injection Vulnerability====- Exploit Title: Joomla comeslamiat Sql Injection Vulnerability Exploit Author: Siamak.Black Tested on: BackTrack , 7 , Redhat Version : 1.5 Script Site : http://www.joomla.org MAil...

WordPress "photocrati-theme" Remote File Upload

Exploit for php platform in category web applications .::IN THE NAME OF ALLAH::. Exploit Title: WordPress "photocrati-theme" Remote File Upload "RFU" By : AShiyane Digital Security Team Dork : "inurl:wp-content/themes/photocrati-theme/admin" Tested : Windows 7 / bt5 Exploit : go to gallery in adm...

SA-CONTRIB-2012-100 - SimpleMeta - Cross Site Request Forgery (CSRF)

The Simple Meta module provides a method to set meta tags, such as page title, description and keywords for nodes, views and other pages. The module doesn't sufficiently confirm user intent when adding and deleting meta tag entries allowing a malicious user to trick a site admin into deleting...

SA-CONTRIB-2012-099 - Node Hierarchy - Cross Site Request Forgery (CSRF)

Node Hierarchy module allows for the creation of parent child relationships among nodes that can create a tree-like hierarchy of content. The module doesn't sufficiently confirm user intent when reordering children nodes allowing a malicious user to trick a site admin to changing the desired...

SA-CONTRIB-2012-102 - Ubercart AJAX Cart - Potential Disclosure of user Session ID

This module enables you to replace the default Ubercart shopping cart block with an AJAX-enabled one. The module includes the user's current session ID in one of its JavaScript settings keys on every page load which could be intercepted if the user's connection is not over SSL. This vulnerability...

SA-CONTRIB-2012-101 - Protected Node - Access Bypass

The Protected Node module enables users to use a password to restrict access to an individual node or all nodes of a node type. The module doesn't sufficiently protect node access when nodes are accessed outside of the standard node view i.e. node/1 is protected but other lists are not. CVE:...

Et-Chat Shell Upload

-------------------- IN The NAme OF God -------------------- -====Et-chat remote file uploader RFU====- Exploit Title:Et-chat remote file uploader RFU Exploit Author: FarbodEZRaeL Tested on: xp MAil : [email protected] -====Dork====- inurl:/styles/admintpl/ -====Exploit====-...

ComSndFTP Server 1.3.7 Beta - Remote Format String Overflow

ComSndFTP Server 1.3.7 Beta - Remote Format String Overflow Title: ComSndFTP Server Remote Format String Overflow Vulnerability Software : ComSndFTP FTP Server Software Version : ComSndFTP 1.3.7 Beta Vendor: http://ftp.comsnd.com/ Vulnerability Published : 2012-06-07 Vulnerability Update Time :...

ComSndFTP 1.3.7 Beta Format String Overflow

Exploit for windows platform in category dos / poc Title: ComSndFTP Server Remote Format String Overflow Vulnerability Software : ComSndFTP FTP Server Software Version : ComSndFTP 1.3.7 Beta Vendor: http://ftp.comsnd.com/ Vulnerability Published : 2012-06-07 Vulnerability Update Time : Status :...

SA-CONTRIB-2012-094 - Maestro module - Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS)

The Maestro module is a workflow engine/solution that facilitates simple and complex business process automation. The module doesn't sufficiently filter user-supplied data in its admin screens leading to a Cross Site Scripting XSS vulnerability. A Cross Site Request Forgery vulnerability in the...

SA-CONTRIB-2012-091 - Token Authentication - Access bypass

The Token Authentication module provides a token for use in the URL to authenticate users to a site. Under certain uncommon situations, the module may not revert a user's session properly. Depending on how tokenauth is used, this could result in subsequent requests being performed as a user with...

SA-CONTRIB-2012-092 - Organic Groups - Cross Site Scripting (XSS) and Access Bypass

The Organic Groups module enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. Cross Site Scripting The module doesn't sufficiently filter user supplied text when used in connectio...

MyBB 1.6.8 With AdvancedProfile 3.1 SQL Injection

-------------------- IN The NAme OF God -------------------- -====MyBB 1.6.8 Sql Injection Vulnerability====- Exploit Title: MyBB 1.6.8 Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack Script Site : http://mybb.com MAil : No0PMatyahoodotcom -====Dork====-...

SA-CONTRIB-2012-096 - Authoring HTML - Cross Site Scripting (XSS)

This module creates an input format suitable for use within a WYSIWYG editor. It adds support for the iframe HTML tag, making it friendly with the popular iframe embeds available in popular video sites like YouTube and Vimeo. It supports the script tag too. Both tags will only be allowed if the...

SA-CONTRIB-2012-095 - Simplenews - Information Disclosure

Simplenews publishes and sends newsletters. When subscribing to a Simplenews mailing list, confirmation may be required, and Simplenews may disclose the user's e-mail address on the confirmation page. Further, due to the absence of a noindex tag, the list of e-mail addresses can subsequently be...