InverseFlow Multiple Cross Site Scripting Vulnerabilities

InverseFlow is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the affected website. This may allow the attacker to...

RuubikCMS <= 1.1.0 Information Disclosure Vulnerability

RuubikCMS is prone to an information disclosure vulnerability because it fails to sufficiently validate user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Anonymous Hackers Take Down 40 Child Porn Websites

Anonymous Hackers Take Down 40 Child Porn Websites Anonymous has taken down more than 40 darknet-based child porn websites over the last week. Details of some of the hacks have been released via pastebin OpDarknet, including personal details 1500 users of a site named 'Lolita City,' and DDoS tool...

WordPress GD Star Rating 1.9.10 SQL Injection

Exploit Title: WordPress GD Star Rating plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ./export.php requireonce"./code/cls/export.php"; ... if isset$GET"ex" $exporttype = $GET"ex"; ... switch$exporttype case "user":...

blueHOMES hacked - 500k users data and Password in Plain text leaked

blueHOMES hacked - 500k users data and Password in Plain text leaked Some Anonymous Hacker hack the French property and property Germany Dealers website blueHOMES.com . About 500,000 Users data claim to be hacked by Hacker and also database include all customer passwords in plaintext, including...

WordPress Plugin GD Star Rating 1.9.10 - SQL Injection

WordPress Plugin GD Star Rating 1.9.10 - SQL Injection Exploit Title: WordPress GD Star Rating plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ./export.php requireonce"./code/cls/export.php"; ... if isset$GET"ex" $exporttype = $GET"ex...

WordPress GD Star Rating plugin <= 1.9.10 SQL Injection

Exploit for php platform in category web applications Exploit Title: WordPress GD Star Rating plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ./export.php requireonce"./code/cls/export.php"; ... if isset$GET"ex" $exporttype = $GET"ex"...

Joomla! Component com_br - state_id SQL Injection

Joomla! Component combr - stateid SQL Injection source: https://www.securityfocus.com/bid/50042/info The 'combr' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

Joomla! Component com_tree - 'key' SQL Injection

source: https://www.securityfocus.com/bid/50041/info The 'comtree' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

GotoCode Online Classifieds - Multiple Vulnerabilities

GotoCode Online Classifieds - Multiple Vulnerabilities Exploit Title : GotoCode Online Classifieds Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 09/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link :...

Windows Gather Internet Explorer User Data Enumeration

This module will collect history, cookies, and credentials from either HTTP auth passwords, or saved form passwords found in auto-complete in Internet Explorer. The ability to gather credentials is only supported for versions of IE =7, while history and cookies can be extracted for all versions...

Banana Dance CMS and Wiki - SQL Injection

Banana Dance CMS and Wiki - SQL Injection +-----------------------+ | Banana Dance CMS+Wiki | +-----------------------+ Vulnerable Web-App : Banana Dance CMS+Wiki Vulnerability : SQLi Author : Aodrulez. Email : [email protected] Google-Dork : : Guess it. Tested on : Ubuntu 10.04 Web-App :...

Oracle Secure Backup Administration Server validate_login Command Injection (CVE-2011-2261)

A command injection vulnerability has been reported in Oracle secure backup administration server. The vulnerability is due to insufficient user data filtering. A remote attacker may exploit this vulnerability by sending a specially crafted HTTP request to a target user. Successful exploitation...

Facebook track your cookies even after logout !

Facebook track your cookies even after logout ! According to Australian technologist Nik Cubrilovic: 'Logging out of Facebook is not enough.' He added, Even after you are logged out, Facebook is able to track your browser's page every time you visit a website. He wrote in his blog 'With my browse...

Tourismscripts Hotel Portal XSS Vulnerability - Active Check

Hotel Portal is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Zyncro 3.0.1.20 - Social Network Message Menu SQL Injection

source: https://www.securityfocus.com/bid/49741/info Zyncro social network is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access o...

OneCMS 2.6.4 - Multiple SQL Injections

OneCMS 2.6.4 - Multiple SQL Injections source: https://www.securityfocus.com/bid/49733/info OneCMS is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Card sharj 1.0 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/49677/info Card sharj is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Linux Foundation & Linux.com multiple server compromised

Linux Foundation & Linux.com multiple server compromised The Linux Foundation has pulled its websites from the web to clean up from a "security breach". A notice posted on the Linux Foundation said the entire infrastructure including LinuxFoundation.org, Linux.com, and their subdomains are down f...

WordPress Plugin Event Registration 5.44 - SQL Injection

Exploit Title: Wordpress Event Registration plugin = 5.44 SQl Injection Vulnerability Google Dork: "?regeventaction=register&eventid" Date: 2011-09-09 Author: serk Vendor: http://edgetechweb.com/ Software Link: https://wordpress.org/extend/plugins/events-registration/ Version: 5.44 exploit...