Saggitarius CMS SQL Injection

Exploit Title : Saggitarius Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://www.IrIsT.Ir/forum Software Link : http://www.saggitarius.pl/ Security Risk : High Version : All Version Tested on : win7,BT,Ubuntu Dork : intext:"design by Saggitarius" Expl0iTs ...

IShang CMS 5.0 / 7.0 SQL Injection

Exploit Title : IShang CMS Login Page Bypass Vulnerability Exploit Author : Adrian Vendor Homepage : http://www.ishang.net/ Google Dork : Use Your Brain Date: 2013/12/28 Tested On : Win8 Software Link : http://www.ishang.net/ Version : 7.0 / 5.0 1 http://site.com/path/admin/ 2...

PT-2013-1942

Name of the Vulnerable Software and Affected Versions e107 version 1.0.1 Description A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that conduct XSS attacks via the news title parameter in a create action. Recommendations For e107...

Astium VoIP PBX 2.1 Remote Root

!/usr/bin/python +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Astium VoIP PBX 0x90.nl Software link :...

Microsoft Internet Explorer Title Element Change Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the...

CVE-2012-5606

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 file name to apps/filesversions/js/versions.js or 2 apps/files/js/filelist.js; or 3 event title to 3rdparty/fullcalendar/js/fullcalendar.js...

CVE-2012-5606

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 4.0.9 and 4.5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 file name to apps/filesversions/js/versions.js or 2 apps/files/js/filelist.js; or 3 event title to 3rdparty/fullcalendar/js/fullcalendar.js...

Private Message System 2.3.0 <= XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Private Message System 2.3.0 alert1337; Test : http://upload.traidnt.net/upfiles/4ul41244.jpg Demo: 01 :http://ptl.su/pms/index.php?page="alert1337; 02 :http://qgcomedyshow.freehostia.com/community/mail/index.php?page="alert1337...

Cisco Wireless Lan Controller 7.2.110.0 - Multiple Vulnerabilities

Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Exploit Title: u M@d? - Cisco WLC CSRF, DoS, and Persistent XSS Vulnerabilities Date: Discovered and reported November 2012 Author: Jacob Holcomb/Gimppy042 - Security Analyst @ Independent Security Evaluators Software: Cisco Wireless Lan...

PHP-Nuke 8.2.4 - Cross-Site Request Forgery

PHP-Nuke 8.2.4 - Cross-Site Request Forgery Exploit Title:CSRF vulnerability Author: sajith version: PHP Nuke 8.2.4 vulnerable app link:http://phpnuke.org/modules.php?name=Release CSRF add group CSRF POC PHP nuke 8.2.4 document.getElementById'formid'.submit;...

Joomla! Component com_jooproperty 1.13.0 - Multiple Vulnerabilities

1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Joomla comjooproperty SQL injection && Cross site scripting Vulnerability Dork: inurl:comjooproperty Date: 10-12-2012 Author: Daniel Barragan "D4NB4R" Twitter:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the 1 Menu Title 2 Link Title, 3 Path...

CVE-2012-5553

Multiple cross-site scripting XSS vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the 1 Menu Title 2 Link Title, 3 Path...

CVE-2012-5569

Multiple cross-site scripting XSS vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a 1 page title or 2 crafted email message...

CVE-2012-5553

Multiple cross-site scripting XSS vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the 1 Menu Title 2 Link Title, 3 Path...

CVE-2012-5559

Cross-site scripting XSS vulnerability in the page manager node view task in the Chaos tool suite ctools module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with permissions to submit or edit nodes to inject arbitrary web script or HTML via the page title...

PT-2012-6023

Name of the Vulnerable Software and Affected Versions OM Maximenu module versions 6.x-1.x before 6.x-1.44 OM Maximenu module versions 7.x-1.x before 7.x-1.44 Description The issue allows remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML...

PT-2012-6027

Name of the Vulnerable Software and Affected Versions ctools module versions 6.x-1.x through 6.x-1.9 Description A cross-site scripting XSS issue exists in the page manager node view task of the ctools module for Drupal, allowing remote authenticated users with node submission or editing...

PT-2012-6030

Name of the Vulnerable Software and Affected Versions Drupal Basic webmail module version 6.x-1.x before 6.x-1.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via a page title or a crafted email message, potentially leading to cross-site scripting XSS attack...

PT-2012-6253

Name of the Vulnerable Software and Affected Versions OM Maximenu module versions 6.x-1.43 and earlier Description The issue allows remote authenticated users with the "Administer OM Maximenu" permission to execute arbitrary PHP code via a "Link Title" when the "Title has PHP" option is enabled...