Ushahidi 2.2 - Multiple Vulnerabilities

Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Full Disclosure: 04/12/2012 1 CSRF Ad...

Hishop 5.4 & 5.4.1 SQL injection-vulnerability warning-the black bar safety net

Exploit Title: Hishop 5.4 &5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor orSoftware Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on: Windows 7 P0c : ? Php printr ' +...

Firstload.com Cross Site Scripting

Exploit Title: Firstload.com usenet Provider Cross Site Scripting Google Dork: - Date: 30/3/2012 Author: Crim3R contact : [email protected] Tested on: ALL CVE : XSS Vulnerable searching for filenames is Vulnerable to Cross Site Scripting http://www.firstload.com/?uniq=1364f75a67db1bc2&log=47382&fn=...

Respuestas.gobiernousa.gov Cross Site Scripting

Exploit Title: Respuestas.gobiernousa.gov Cross Site Scripting Google Dork: - Date: 26/3/2012 3:15 AM Malaysia Author: Ryuzaki Lawlet Blog: http://justryuz.blogspot.com Tested on: Linux OSHIRIX CVE : XSS Vulnerable Vulnerable :...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Wordpress 3.3.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-2012 Author : Ivan...

Abanet SQL Injection

ÿþ Exploit Title : Abanet-SQL Injection Vulnerability Category : Webapps Dork : Yol Al! = Date : 17.03.2012 Vendor : http://www.abanet.it Demo :http://www.gianlucadifabio.it/ita/video.php?idc=1' Author : By-ReiS Contact : [email protected] Greetz :www.Cyber-Warrior.org and all users A few...

Acal Calendar 2.2.6 - Cross-Site Request Forgery

Acal Calendar 2.2.6 - Cross-Site Request Forgery Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer"...

Toronto Web Design Cross Site Scripting

Exploit Title : Toronto Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.123web.ca/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Toront...

Pussytorrents.org Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : Pussytorrents.org - Website XSS Cross Site Scripting Author : Atmon3r Date : 02/03/2012 Editor : Pussytorrents.org Perso : More p0rn please ! Xss type : $GET...

CVE-2012-1227

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

CVE-2012-1227

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

CVE-2012-1219

Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...

Creatop SQL Injection

Exploit Title: Creatop SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.creatop.com.tw/ Date : 17.02.2012 Platform : Php Demos Site : http://www.grand-view.com.tw/chinese/06about/about.php?ID=4 SQL...

SibexSystems SQL Injection

Exploit Title: SibexSystems SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://sibexsystems.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.kashifhafeez.com/reply.php?id=1772 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Baz...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

Cross site scripting

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

BFT- Browser forensic tool Released by DarkCoderSc

BFT- Browser forensic tool Released by DarkCoderSc From the Developer of Famous DarkComet RAT Tool, DarkCoderSc Yesterday Release Another Interesting tool called BFT- Browser forensic tool. Browser forensic tool, is a software that will search in all kind of browser history even archived in a few...