WordPress 3.3.1 Cross Site Request Forgery

+---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Nederlanden's Server Website (.nl) - SQL injection

Exploit for php platform in category web applications | / | | | | | | |/ / | | \ / | | | | | | | | | | || | | |/| |/ | / | | | | | | | | || | | | | | | | || | | || || | | || || | || ||,|\,||, |/ / || / | |/ On 1337day.com |------------------------------------------ Vulnerability info...

Ushahidi 2.2 - Multiple Vulnerabilities

Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Full Disclosure: 04/12/2012 1 CSRF Ad...

Hishop 5.4 & 5.4.1 SQL injection-vulnerability warning-the black bar safety net

Exploit Title: Hishop 5.4 &5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor orSoftware Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on: Windows 7 P0c : ? Php printr ' +...

PT-2012-3709

Name of the Vulnerable Software and Affected Versions SocialCMS versions 1.0.2 and earlier Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via the TR title parameter in an edit action. Recommendations For SocialCMS versions 1.0...

Firstload.com Cross Site Scripting

Exploit Title: Firstload.com usenet Provider Cross Site Scripting Google Dork: - Date: 30/3/2012 Author: Crim3R contact : [email protected] Tested on: ALL CVE : XSS Vulnerable searching for filenames is Vulnerable to Cross Site Scripting http://www.firstload.com/?uniq=1364f75a67db1bc2&log=47382&fn=...

Respuestas.gobiernousa.gov Cross Site Scripting

Exploit Title: Respuestas.gobiernousa.gov Cross Site Scripting Google Dork: - Date: 26/3/2012 3:15 AM Malaysia Author: Ryuzaki Lawlet Blog: http://justryuz.blogspot.com Tested on: Linux OSHIRIX CVE : XSS Vulnerable Vulnerable :...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Wordpress 3.3.1 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wordpress 3.3.1 Multiple CSRF Vulnerabilities Date : 19-03-2012 Author : Ivan...

Abanet SQL Injection

ÿþ Exploit Title : Abanet-SQL Injection Vulnerability Category : Webapps Dork : Yol Al! = Date : 17.03.2012 Vendor : http://www.abanet.it Demo :http://www.gianlucadifabio.it/ita/video.php?idc=1' Author : By-ReiS Contact : [email protected] Greetz :www.Cyber-Warrior.org and all users A few...

Acal Calendar 2.2.6 - Cross-Site Request Forgery

Acal Calendar 2.2.6 - Cross-Site Request Forgery Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer"...

Toronto Web Design Cross Site Scripting

Exploit Title : Toronto Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.123web.ca/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Toront...

Pussytorrents.org Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : Pussytorrents.org - Website XSS Cross Site Scripting Author : Atmon3r Date : 02/03/2012 Editor : Pussytorrents.org Perso : More p0rn please ! Xss type : $GET...

CVE-2012-1227

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

CVE-2012-1219

Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...

CVE-2012-1227

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

PT-2012-3142

Name of the Vulnerable Software and Affected Versions freelancerKit version 2.35 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the ticket parameter to "tickets.php", the title...

CVE-2012-1227: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

Creatop SQL Injection

Exploit Title: Creatop SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.creatop.com.tw/ Date : 17.02.2012 Platform : Php Demos Site : http://www.grand-view.com.tw/chinese/06about/about.php?ID=4 SQL...