W-CMS 2.01 Cross Site Scripting / Directory Traversal

Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet goel, w4rl0ck.d0wn, Chip, VzAcnY, Razzy, Sayan, Jaggi...

w-CMS 2.01 - Multiple Vulnerabilities

Exploit Title: W-Cms Multiple Vulnerability Date: 2012-01-09 Author: th3.g4m30v3r Site:http://w-cms.info/ Software Link: http://code.google.com/p/wcms/ Dork: intext:"Powered by w-CMS" Version : 2.01 Tested on: Window 7 Yogesh Kashyap, shubneet goel, w4rl0ck.d0wn, Chip, VzAcnY, Razzy, Sayan, Jaggi...

Successful Shell Attack Detected - FreeBSD 'w' Command

Binary data 6155.prm...

CVE-2010-4868

Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...

CVE-2010-4867

Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...

Directory traversal

Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...

CVE-2010-4868

CVE-2010-4868 affects W-Agora (4.2.1 and earlier), with a cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) exploitable via the bn parameter. OpenVAS notes also a local file-inclusion path, both arising from improper input sanitization. Impact described as arbitrary script/...

CVE-2010-4868

Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...

CVE-2010-4867

The CVE-2010-4867 entry affects W-Agora 4.2.1 and earlier. Affected component: search.php3 (aka search.php). Root cause: directory traversal via the bn parameter ( bn in URL ), allowing an attacker to include and execute local files. Consequence: remote arbitrary local file inclusion, with potent...

Zynga Vampiresgame Cross Site Scripting

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| Author: r007k17-w a.k.a Raghavendra Karthik.D Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: Copyright 2010 Zynga Game Network Inc...

w-Agora Forum 4.2.1 - Arbitrary File Upload

w-Agora Forum 4.2.1 - Arbitrary File Upload ?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site...

w-Agora Forum 4.2.1 Arbitrary File Upload Exploit

Exploit for php platform in category web applications ?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Si...

w-Agora Forum 4.2.1 Shell Upload

?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site ........................: http://treasuresec.com...

w-Agora Forum 4.2.1 - Arbitrary File Upload

?php / Title .......................: w-Agora Forum 4.2.1 Remote File Upload Exploit Site ........................: http://www.w-agora.com/en/download.php Version .....................: 4.2.1 Author ......................: Treasure Priyamal Site ........................: http://treasuresec.com...

w-techno Remote File Upload Vulnerability

Exploit for php platform in category web applications + Info + + Exploit Title: w-techno Remote File Upload Vulnerability + Author : Net.Edit0r + Discovered By: 3H34N + E-mail : email protected and email protected + Versian : All Ver + Category : Web Apps Remote + Platform : Tested on: linux +...

LFI, IAA, XSS и FPD уязвимости в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Local File Inclusion, Insufficient Anti-automation, Cross-Site Scripting и Full path disclosure уязвимостях в W-Agora. Local File Inclusion WASC-31: http://site/register.php?bn=1 в папке conf http://site/register.php?bn=..1 в любой папке - только ...

W-Agora 4.2.1 Cross Site Scripting / Local File Inclusion

Hello list! I want to warn you about Cross-Site Scripting, Local File Inclusion and Brute Force vulnerabilities in W-Agora. SecurityVulns ID: 11499. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous versions. ---------- Details:...

XSS, LFI и BT уязвимости в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Local File Inclusion и Brute Force уязвимостях в W-Agora. XSS WASC-08: http://site/current/getfile.php/supporthowto/223E3Cbody20onload=alertdocument.cookie3E/1/ Local File Inclusion WASC-31: В папке conf:...

W-Agora 4.2.1 Cross Site Scripting / Denial Of Service / SQL Injection

Hello Packet Storm! I want to warn you about Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection and Denial of Service vulnerabilities in W-Agora. SecurityVulns ID: 11324. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous...