SEO PHP Directory Software CSRF

Exploit for php platform in category web applications Exploit Title: SEO PHP Directory Software CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/php-directory-software-seo/32316/ Category:: webapps Demo : http://demos1.softbiz.com/scripts/seodirectory/admin/ Greet...

ManageEngine DeviceExpert 5.6 Java Server Directory Traversal

Exploit for jsp platform in category web applications ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage: http://www.manageengine.com/products/device-expert/ file...

PHP Gift Registry 1.5.5 SQL Injection

Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL Injection. A user must be signed in to...

Invision Power Board 3.2.3 Cross Site Scripting

Name : Cross-site scripting vulnerability in Invision Power Board version 3.2.3 Software : Invision Power Board version 3.2.3 Vendor Homepage : http://www.invisionpower.com Vulnerability Type : Cross-site scripting Researcher : Vasil A. [email protected] Description -------------------- Invision Power...

Advanced POWER PACKED Freelancers CSRF

Exploit for php platform in category web applications Exploit Title: Advanced POWER PACKED Freelancers CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/advanced-power-packed-freelancers-script-php/22749/ Category:: webapps Demo :...

Barracuda CSRF (change e-mail address)

Exploit for php platform in category web applications Exploit Title: Barracuda CSRF change e-mail address Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/barracuda/19576/ Category:: webapps Demo : http://demo.boonex.com/administration/ Greetz: Inj3ct0r Exploit DataBas...

Softbiz Quick Ad Manager CSRF

Exploit for php platform in category web applications Exploit Title: Softbiz Quick Ad Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/softbiz-quick-ad-manager/32339/ Category:: webapps Demo : http://www.softbizscripts.com/scripts/ba/admin/ Greetz: Inj3ct0...

Paypal Affiliate Script CSRF

Exploit for php platform in category web applications Exploit Title: Paypal Affiliate Script CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/php-scripts/affiliate-program-software/phpaffiliate-paypal-affiliate-script/ Category:: webapps Demo :...

Eleytt Research ER-03-2012

Eleytt Research www.eleytt.com Overview: ==================== Michal A. Bucko Credit: ==================== Anonymous researcher Michal A. Bucko Vulnerability Table =================== Note: All of the vulnerabilities are reported in Holdem Manager Professional, poker tracking software. 1. Holdem...

Выполнение подзапросов и команд ОС в инъекциях SELECT под MySQL

We would like to open our blog notes on the practical implementation of the SQL-injections. And also we try to focus more attention on the practical aspects of web application security in the future. SQL injections are the most common server-side Web application vulnerabilities and meet almost...

Boc Web SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

Book Review : Defense against the Black Arts

Book Review : Defense against the Black Arts How Hackers Do What They Do and How to Protect against It Ben Rothke write a review of a new book on hacking "Defense against the Black Arts: How Hackers Do What They Do and How to Protect against It". Authors are Jesse Varsalone, Matthew Mcfadden,...

Multiple vulnerabilities in ZENphoto

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ZENphoto, which can be exploited to perform arbitrary PHP code execution, sql injection and cross site scripting attacks. 1 Arbitrary PHP Code Execution in ZENphoto: CVE-2012-0993 Input passed via...

FineArtPost Cross Site Scripting

FineArtPost XSS Cross Site Scripting Vulnerability Software : FineArtPost Date : 7/1/2012 Vendor : http://www.fineartpost.com/ Get App. : http://www.fineartpost.com/aboutfap/pricing.php Beta : http://www.fineartpost.com/fap2/beta.php Price : $149.59 Dork : inurl:"/displayimages.php?uid="...

OrangeHRM 2.6.11 - '/lib/controllers/CentralController.php?id' SQL Injection

source: https://www.securityfocus.com/bid/50857/info OrangeHRM is prone to an SQL-injection and multiple cross-site scripting vulnerabilities. Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify...

Web App Pentesting - PenTest Magazine

Web App Pentesting - Pentest Magazine The significance of HTTP and the Web for Advanced Persistent Threats Web Application Security and Penetration Testing Developers are form Wenus, Application Security guys from Mars Pulling legs of Arachni XSS BeeF Metaspolit Exploitation Cross-site request...

XSS vulnerability in Joomla 1.6.3

Information -------------------- Name : XSS vulnerability in Joomla 1.6.3. Software : All 1.6.x installs prior to and including 1.6.3 are affected. Vendor Hompeage : http://www.joomla.org Vulnerability Type : Cross-Site Scripting Severity : High Researcher : Mesut Timur mesut at mavitunasecurity...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

OneOrZero AIMS Security Bypass and SQLi Vulnerabilities

OneOrZero AIMS is prone to a security bypass vulnerability and an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Researcher: Malware, Increasingly Interdependent, Stifles Security Wares

BARCELONA — A researcher says that malicious software such as botnets and browser exploit kits are becoming more and more interdependent, complicating the job of those who seek to detect and remove the malware. Aditya Sood, a doctoral student in the Department of Computer Science and Engineering ...