2611 matches found
phpldapadmin 1.2.2 Cross Site Scripting
Attach some PoC analysis related to a XSS vulnerability to phpldapadmin. I previously coordinate with the Cert-US in order they contact with Sourceforge and Debian, but receive they was unable to put in contact with them. The first discover was on January 10 for 1.1.6 version, where after noticed...
phpLDAPadmin 'base' Parameter Cross Site Scripting Vulnerability
phpLDAPadmin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...
miniCMS Multiple Remote PHP Code Injection Vulnerabilities
miniCMS is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary PHP code because the application fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected application and possibly the underlying computer. miniCMS 1.0 and 2.0 are...
phpVideoPro Multiple XSS vulnerabilities
Advisory: phpVideoPro Multiple XSS vulnerabilities Advisory ID: SSCHADV2011-041 Author: Stefan Schurtz Affected Software: Successfully tested on phpVideoPro 0.9.7 Vendor URL: http://sourceforge.net/projects/phpvideopro/ Vendor Status: fix in the latest development code ==========================...
phpVideoPro 0.9.7 Cross Site Scripting
Advisory: phpVideoPro Multiple XSS vulnerabilities Advisory ID: SSCHADV2011-041 Author: Stefan Schurtz Affected Software: Successfully tested on phpVideoPro 0.9.7 Vendor URL: http://sourceforge.net/projects/phpvideopro/ Vendor Status: fix in the latest development code ==========================...
SAPID 1.2.3 Stable Remote File Inclusion Vulnerability
Exploit for php platform in category web applications Exploit Title: SAPID Stable RFI Google Dork: tanyakan pada dan pemula :D Date: January 08 2011 Author: Opa Yong Software Link: http://sourceforge.net/projects/sapid/files/sapid-cms/ Version: SAPID 1.2.3 Stable Tested on: Windows XP Home Editio...
SAPID 1.2.3 Stable - Remote File Inclusion
Exploit Title: SAPID Stable RFI Google Dork: tanyakan pada dan pemula :D Date: January 08 2011 Author: Opa Yong Software Link: http://sourceforge.net/projects/sapid/files/sapid-cms/ Version: SAPID 1.2.3 Stable Tested on: Windows XP Home Edition SP2 @POC:...
SAPID 1.2.3 Remote File Inclusion
Exploit Title: SAPID Stable RFI Google Dork: tanyakan pada dan pemula :D Date: January 08 2011 Author: Opa Yong Software Link: http://sourceforge.net/projects/sapid/files/sapid-cms/ Version: SAPID 1.2.3 Stable Tested on: Windows XP Home Edition SP2 @POC:...
VertrigoServ 2.25 Cross Site Scripting
Advisory: VertrigoServ 2.25 Cross-Site-Scripting vulnerability Advisory ID: INFOSERVE-ADV2011-11 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on VertrigoServ 2.25 Vendor URL: http://vertrigo.sourceforge.net/ Vendor Status: informed...
SourceForge Local File Inclusion
Exploit Title: SourceForge.Net LGames LFI Vulnerability / 0DAY Date: 31/12/2011 - 17.38 Author: 3spi0n Platform: Php Vulnerable File - " index.php?project= " $ Vulnerability ; Lgames.sourceforge.net/index.php?project=../../../.././../etc/passwd%00LFI Vulnerability Dar bi Koridor Benimki, Kendimi...
PHP Booking Calendar 'page_info_message' Parameter Cross Site Scripting Vulnerability
PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...
TORCS 1.3.1 Buffer Overflow
/ Exploit Title: TORCS acc Buffer Overflow Date: 20/12/2011 Author: Andres Gomez Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.1 Tested on: Windows CVE : / / This exploit generates a corrupted acc file which has to be saved in the directories where TORCS loads its data, for...
TORCS 1.3.1 acc Buffer Overflow
Exploit for windows platform in category local exploits / Exploit Title: TORCS acc Buffer Overflow Date: 20/12/2011 Author: Andres Gomez Software Link: http://torcs.sourceforge.net/ Version: torcs 1.3.1 Tested on: Windows CVE : / / This exploit generates a corrupted acc file which has to be saved...
DotA OpenStats 1.3.9 - SQL Injection
DotA OpenStats 1.3.9 - SQL Injection ============= Exploit Title: DotA OpenStats SQL Injection Vulnerability Google Dork: "© 2011 Powered by DotA OpenStats" Date: 19/12/2011 Author: HvM17 Version: 1.3.9 and below Tested on: WinXP ============= VenDor : http://openstats.iz.rs/ Download script:...
DotA OpenStats <= 1.3.9 SQL Injection
Exploit for php platform in category web applications ============= Exploit Title: DotA OpenStats SQL Injection Vulnerability Google Dork: "© 2011 Powered by DotA OpenStats" Date: 19/12/2011 Author: HvM17 Version: 1.3.9 and below Tested on: WinXP ============= VenDor : http://openstats.iz.rs/...
Open Season on Open Source
A flurry of attacks on open source servers, operating systems and software also permeated the headlines this year, with a compromise of the repository for the Linux source code leading the way. It appeared the code wasn’t compromised when the attack was initially reported, yet weeks after, the...
Xoops 2.5.4 - Blind SQL Injection
------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom Tested on: Freebsd 8 and Debian...
FCMS_2.7.2 cms and earlier multiple stored XSS Vulnerability
Exploit for php platform in category web applications FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...
FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities
FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...
FCMS 2.7.2 Cross Site Scripting
FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...