Webistry CMS 1.0 SQL Injection

Exploit Title : Webistry v1.0 CMS SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : Powered by CMS : Webistry v1.0 Script Page : null Exploit http://127.0.0.1/ PATH /index.php?pid=14' SQL http://127.0.0.1/ PATH /index.php?pid=14 union select...

Web File Browser 0.4b14 File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Web File Browser 0.4b14 File Download Vulnerability Date: 2011/11/03 Author: Sangyun YOO Email: yoosy0302 at naver dot com Software Link:...

Mevin Productions SQL Injection

Exploit Title: mevin productions Sql Injection Vulnerability Date: 30/10/2011 - 23:00 Author: 3spi0n Software Website: http://www.mevin.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Event.php $ Dorks: "Powered by: mevin productions" inurl:/event.php?id= $ Demo Sites...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...

Opera 11.51 - Use-After-Free Crash (PoC)

Opera 11.51 - Use-After-Free Crash PoC Exploit Title: Opera Use After Free - Crash PoC Date: 20 October 2011 Author: Roberto Suggi Liverani Software Link: www.opera.com Version: 11.51 and previous versions Tested on: Windows XP and Windows 7 CVE : n/a Link:...

Pre Studio Business Cards Designer - SQL Injection

Pre Studio Business Cards Designer - SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: drzig Date: 20-10-2011 Softwar...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

MyBB MyStatus 3.1 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Advanced Forum Signatures 2.0.4 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

Linux pkexec / polkitd 0.96 Race Condition

!/bin/sh pid; if stat procbuf, &statbuf != 0 gseterror error, POLKITERROR, POLKITERRORFAILED, "stat failed for /proc/%d: %s", process-pid, gstrerror errno; goto out; where the code only rely on stat of the pseudo filesystem src/polkit/polkitsubject.c --------- there's not enough validation to run...

CVE-2011-3598

Multiple cross-site scripting XSS vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 a web page title, related to classes/Misc.php; or the 2 returnurl or 3 returndesc parameter to display.php...

CVE-2010-4863

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

CVE-2010-4863

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

PT-2011-1798

Name of the Vulnerable Software and Affected Versions GetSimple CMS version 2.01 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the post-title parameter in the "admin/changedata.php" endpoint...

CVE-2010-4863: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/changedata.php in GetSimple CMS 2.01 allows remote attackers to inject arbitrary web script or HTML via the post-title parameter...

LightNEasy 3.4.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================================= LightNEasy 3.4.2 Multiple Vulnerabilities =========================================================================...

CVE-2010-4848

Multiple cross-site scripting XSS vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 title parameter...

CVE-2010-4848: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the 1 url or 2 title parameter...

PT-2011-1783

Name of the Vulnerable Software and Affected Versions AXScripts AxsLinks version 0.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the url or title parameters in the...