Pussytorrents.org Cross Site Scripting

+-------------------------------------------------------------------------+ Exploit Title : Pussytorrents.org - Website XSS Cross Site Scripting Author : Atmon3r Date : 02/03/2012 Editor : Pussytorrents.org Perso : More p0rn please ! Xss type : $GET...

CVE-2012-1227

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

CVE-2012-1219

Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...

CVE-2012-1227

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

CVE-2012-1227: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that 1 modify the admin email address or 2 modify the blog title via a settings action; 3 add a page via an editpage action, or 4 add a...

PT-2012-3142

Name of the Vulnerable Software and Affected Versions freelancerKit version 2.35 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the ticket parameter to "tickets.php", the title...

Creatop SQL Injection

Exploit Title: Creatop SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.creatop.com.tw/ Date : 17.02.2012 Platform : Php Demos Site : http://www.grand-view.com.tw/chinese/06about/about.php?ID=4 SQL...

SibexSystems SQL Injection

Exploit Title: SibexSystems SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://sibexsystems.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.kashifhafeez.com/reply.php?id=1772 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Baz...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

Cross site scripting

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

PT-2012-3048

Name of the Vulnerable Software and Affected Versions OSCommerce Online Merchant version 3.0.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the value title parameter. This can be demonstrated using the "Front" field in the shirt...

CVE-2012-1066: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

PT-2012-3054

Name of the Vulnerable Software and Affected Versions SmartyCMS version 0.9.4 Description A cross-site scripting XSS issue exists in the template module, allowing remote attackers to inject arbitrary web script or HTML via the title bar. This could potentially lead to unauthorized actions on the...

BFT- Browser forensic tool Released by DarkCoderSc

BFT- Browser forensic tool Released by DarkCoderSc From the Developer of Famous DarkComet RAT Tool, DarkCoderSc Yesterday Release Another Interesting tool called BFT- Browser forensic tool. Browser forensic tool, is a software that will search in all kind of browser history even archived in a few...

AUTON Otomotiv Sanayi SQL Injection

AUTON Otomotiv Sanayi SQL injection Exploit Title: AUTON Otomotiv Sanayi SQL injection Vulnerability Date: 08/02/2012 - 10:34 Author: KatiLhacker Software Website: http://www.sonax.com.tr Tested On: BackTrack 5 - Win7 Ultimate Platform: PHP $ Dorks: "inurl:"haber.php?ID=" $ Demo Sites:...

Snort Report 1.3.2 Local File Inclusion

Exploit Title: Snort Report Local File Inclusion Date: 05/02/2012 Author: T0x!c Software Link: http://www.symmetrixtech.com/ids/snortreport-1.3.2.tar.gz Version: = 1.3.2 Platform: PHP -= vuln c0de =- "/DB.php" 59 $file = join"", array"DB", $dbtype, ".php"; 60 require$file; ----exploit----...

CVE-2012-0976

Cross-site scripting XSS vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information...

CVE-2012-0976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/EditForm in SilverStripe 2.4.6 allows remote authenticated users with Content Authors privileges to inject arbitrary web script or HTML via the Title parameter. NOTE: some of these details are obtained from third party information...