WordPress Plugin grapefile 1.1 - Arbitrary File Upload

WordPress Plugin grapefile 1.1 - Arbitrary File Upload Title: Wordpress grapefile plugin = 1.1 Arbitrary file upload Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Version: 1.1 Software link:http://wordpress.org/extend/plugins/grapefile/ PoC: curl -F "[email protected]"...

Free MP3 CD Ripper 1.1 - DEP Bypass

!/usr/bin/python +Exploit Title: Free MP3 CD Ripper 1.1 Universal DEP Bypass Exploit +Date: 27\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.brothersoft.com/free-mp3-cd-ripper-84543.html +Found/Initial Exploit: X-h4ckhttp://www.exploit-db.com/exploits/17727/ +Version: 1.1 +Tested On:...

web@all <= 1.1 XSS Vulnerability - Active Check

web@all is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

[email protected] <= 1.1 Remote Admin Settings Change

Exploit for php platform in category web applications Author: giudinvx Email: Date: 27/12/2010 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- Application Info: email protected 1.1 email protected is a CMS which is not similar to general CMS, you...

Skybluecanvas 1.1-r248 - Cross-Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 1 +Exploit Title: Skybluecanvas.v1.1-r248 CSRF vulnirabilitie 0 0 +Date: 022/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: www.skybluecanvas.com 0 0 +Download:...

Mechbunny PaysiteReviewCMS Cross Site Scripting

Exploit Title: Mechbunny PaysiteReviewCMS Permanent XSS Vulnerabilities Date: 11.09.2010 Author: Valentin Category: webapps/0day Version: 1.1 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title =...

Live School Portal SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== Live School Portal SQL Injection Vulnerability ============================================== Date: 05.09.10 Author: BARCOD3 Software Link: http://www.aspindir.com/Goster/5759 Version: v.1.1...

JE CMS version 1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== JE CMS version 1.1 SQL Injection Vulnerability ==============================================...

Joomla Camp26 VisitorData Module Shell Command Injection Vulnerability

No description provided by source. A vulnerability has been discovered in the Camp26 VisitorData module for Joomla, which can be exploited by malicious people to compromise a vulnerable system. Input passed via the "X-Forwarded-For" HTTP header is not properly sanitised before being used as a...

CF Image Hosting Script 1.1 - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/39870/info CF Image Hosting Script is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver...

Joes News System Files CMS 1.1 XSS Vulnerabilities

Exploit for php platform in category web applications ================================================== Joes News System Files CMS 1.1 XSS Vulnerabilities ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\...

netkar-PRO 1.1 - Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/39555/info netkar-PRO is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to execute...

TSOKA:CMS 1.1/1.9/2.0 - SQL Injection / Cross-Site Scripting

----------------------------------------------------------------------------------------------------------------------- TSOKA:CMS v1.1 , v1.9 AND v2.0 SQL Injection & XSS Vulnerability http://www.alanzard.com from italy...

New Advisore Stack 1.1 - Directory Traversal

New Advisore Stack 1.1 - Directory Traversal =============================================================================================== L.F.ISTACK version 1.1L.F.I =============================================================================================== Author : R3VANBASTARD Download:...

New Advisore Stack Ver 1.1 Directory Traversal Vulnerability

Exploit for unknown platform in category web applications ============================================================ New Advisore Stack Ver 1.1 Directory Traversal Vulnerability ============================================================...

SystemTap 'stap-server' Remote Shell Command Injection Vulnerability

This host has SystemTap installed and is prone to Arbitrary Command Execution vulnerability OpenVAS Vulnerability Test $Id: secpodsystemtapshellcmdinjectionvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ SystemTap 'stap-server' Remote Shell Command Injection Vulnerability Authors: Madhuri D Copyrigh...

UCStats 1.1 - SQL Injection

UCStats 1.1 - SQL Injection UCStats 1.1 Remote SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "Powered by UCStats version 1.1" Vulnerability Description: UCStats version 1.1 suffers a remote SQL injection...

ES Simple Uploader v 1.1 Upload Shell Vulnerability

Exploit for unknown platform in category web applications =================================================== ES Simple Uploader v 1.1 Upload Shell Vulnerability =================================================== 0day.today 2018-01-09...

SitePal v1.1(Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================== SitePal v1.1Auth Bypass SQL Injection Vulnerability ===================================================== Exploit: username:admin password: X' or ' 1=1-- admin login for demo:...

Skybluecanvas 1.1 r237 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44225/info SkyBlueCanvas is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...