SA-CONTRIB-2012-009 - Revisioning - Access bypass

CVE: CVE-2012-1635 This module enables you to create moderation publication workflows, allowing authors to create content that isn't visible to the public until it has been approved by a moderator/publisher. The module's implementation of hooknodeaccess assumes that access is to granted/denied...

SA-CONTRIB-2012-012 - Quicktabs - Cross Site Scripting (XSS)

CVE: CVE-2012-1637 The Quick Tabs module allows users to create blocks of tabbed content, specifying a title for the block and the individual tabs. Quick Tabs does not do sufficient filtering of user supplied text which presents a cross site scripting vulnerability. This vulnerability is mitigate...

Joomla! Component com_discussions - SQL Injection

Joomla! Component comdiscussions - SQL Injection Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info ...

SA-CONTRIB-2012-010 - stickynote - Multiple vulnerabilities

CVE: CVE-2012-1636 This module enables you to add textual notes in a block to perform quality assurance of your site. Previously it did not sufficiently protect against Cross Site Scripting XSS or Cross Site Request Forgery CSRF. This vulnerability is mitigated by the fact that an attacker must...

Joomla! Component com_discussions - SQL Injection

Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

Joomla Discussions Component (com_discussions) SQL Injection

Exploit for php platform in category web applications Title : Joomla Discussions Component comdiscussions SQL Injection Vulnerability Author : Red Security TEAM Date : 17/01/2012 Risk : High Software : http://extensions.joomla.org/extensions/communication/forum/13560 Tested On : CentOS Contact :...

SA-CONTRIB-2013-004 - Live CSS - Arbitrary Code Execution

This module enables you to save CSS and LESS files on the server via your browser. The module doesn't check that the file being saved isn't a script or executable. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer CSS". CVE identifiers...

RedHat Update for libxml2 RHSA-2012:0017-01

Check for the Version of libxml2 OpenVAS Vulnerability Test RedHat Update for libxml2 RHSA-2012:0017-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

WordPress Count-Per-Day File Download / Cross Site Scripting

Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: '...

Wordpress Count-per-day plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Count-per-day Wordpress plugin Arbitrary file download and XSS Version: ' 0day.today 2018-03-03...

x3cms 0.4.3 Cross Site Scripting

Advisory: Multiple Cross-Site-Scripting vulnerabilities in x3cms Advisory ID: INFOSERVE-ADV2011-04 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on x3cms 0.4.3 other versions may also be affected Vendor URL: http://www.x3cms.net/ Vendor Status: Parti...

Important: Red Hat Security Advisory: libxml2 security update

Updated libxml2 packages that fix several security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Giveaway Manager 3 Cross Site Scripting

Exploit Title: Giveaway Manager 3 Cross Site Scripting Vulnerabilitiy Google Dork: intext:"Powered By: Giveaway Manager 3" Date: 10/1/2012 Author: H4ckCity Security Team & IrIsT Discovered By: Am!r Home: WwW.H4ckCity.Org Software Link: www.bigb-trading.com Version: All Version Category:: webapps...

SA-CONTRIB-2012-007 - Password Policy - Multiple vulnerabilities

This module enables you to specify a certain level of password complexity aka. "password hardening" for user passwords on a system by defining a policy. Cross Site Request Forgery CSRF CVE: CVE-2012-1633 Unblocking a user does not require sufficient confirmation by administrative users and can be...

Big B Trading CMS Cross Site Scripting

Exploit Title:Big B Trading CMS Cross Site Scripting Vulnerabilitiy Google Dork: intext:"Website by Big B Trading" Date: 10/1/2012 Author: H4ckCity Security Team & IrIsT Discovered By: Am!r Home: WwW.H4ckCity.Org Software Link: www.bigb-trading.com Version: All Version Category:: webapps Security...

PHP-Fusion 7.02.04 Cross Site Scripting

ISlamic Republic Of IRan Security Team http://irist.ir/forum/ PHP-Fusion V.7.02.04 Cross-Site Scripting Vulnerabilities Download......: http://www.php-fusion.co.uk/ Exploit.......: http://www.site.com/path/downloads.php?catid=Xss Google Search.: "Powered by PHP-Fusion" Bug Found.....: IrIsT.Ir...

Ggb Guestbook - XSS Vulnerabilities

Title: Ggb Guestbook - XSS Vulnerabilities Software : Ggb Guestbook Software Version : 0.3.1 Vendor: http://gelin.ru/soft/project/ggb/ http://code.google.com/p/ggbook/ Vulnerability Published : 2012-01-05 Vulnerability Update Time : Status : Impact : Medium Bug Description : Ggb Guestbookversion...

AiDesign SQL Injection

Exploit Title: AiDesign SQL Injection Vulnerability Google Dork: "Powered by: AiDesign" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.adx.hk Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

Marinet CMS SQL Injection

Exploit Title: Marinet CMS SQL Injection Vulnerability Google Dork: "powered by Marinet" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.marinet.gr Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Lin...

Advanced File Management 1.4 Cross Site Scripting

ISlamic Republic Of IRan Security Team http://irist.ir/forum/ Advanced File Management v1.4 Cross-Site Scripting Vulnerabilities Download......: http://www.dl.p30script.ir/1390-7/Advanced-File-Management-v1.4P30Script.ir.rar Exploit.......: http://www.site.com/path/users.php?page=xss Google...