OpenSupports Remote Shell Upload Vulnerability

Sites powered by OpenSupports suffer from a remote shell upload vulnerability. Exploit Title: Open Support Arbitrary Remote File Upload Vulnerabilities Google Dork: allintext: "Power by OpenSupports © 2009 - 2014. All Rights reserved" Date: 02,March 02,2014 Exploit Author: Slotleet Vendor Homepag...

Live HTTP Support (RHINO) 4.1 Cross Site Scripting Vulnerability

Live HTTP Support RHINO version 4.1 suffers from cross site scripting and remote change password vulnerabilities. Advisory: Live http support RHINO 4.1 Frontend - XSS & Remote Change Password Author: Slotleet Email: email protected Affected Software: Successfully tested on Live http support RHINO...

CoryApp Cory Support SQL Injection

Exploit Title: CoryApp Cory Support MySQL Injection Vulnerabilities Google Dork: None Date: 02,March 02,2014 Exploit Author: Slotleet Vendor Homepage: http://coryapp.com Software Link: http://coryapp.com/download/?file=6108cd096d1c940dcff7c300ba966934 u have to register Version: None Tested on:...

Live HTTP Support (RHINO) 4.1 Cross Site Scripting

Advisory: Live http support RHINO 4.1 Frontend - XSS & Remote Change Password Author: Slotleet Email: [email protected] Affected Software: Successfully tested on Live http support RHINO 4.1 Vendor URL: http://www.livesupportrhino.com Vendor Status: Not Fixed ==========================...