[MajorSecurity SA-073]Subdreamer CMS - SQL injection vulnerability

MajorSecurity SA-073Subdreamer CMS - SQL injection vulnerability Details ============= Product: Subdreamer CMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.subdreamer.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz...

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability CVE-2010-1392 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities

PHP-Calendar "description" and "lastaction" Cross Site Scripting Vulnerabilities I. BACKGROUND --------------------- "PHP-Calendar is a simple web calendar. It is targeted towards groups that need to collaboratively create and track events. In that same collaborative spirit, the source for...

phpGroupWare <= 0.9.16.015 SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== phpGroupWare = 0.9.16.015 SQL Injection Vulnerability ====================================================== I. BACKGROUND --------------------- "phpGroupWare is a fully featured, web base...

waibrasil Remote / Local File Inclusion

Exploit for php platform in category web applications ======================================= waibrasil Remote / Local File Inclusion ======================================= Author: eXeSoul Vendor: www.waibrasil.com.br category: Remote Version: Web Application Tested on: Apcahe/Unix Code : exploi...

wsCMS SQL Injection

Exploit Title: wsCMS news.php Sql injection Vulnerability Date: 1-5-2010 Author: Err0R Software Link: Websolutions.ca Version: php Code : 1272 ================================================= wsCMS news.php Sql injection Vulnerability ================================================= + Author :...

Joomla! Component Table JX - Cross-Site Scripting

Joomla! Component Table JX - Cross-Site Scripting Exploit Title: Joomla Component Table JX XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Tit...

New-CMS - Multiple Vulnerabilities

New-CMS - Multiple Vulnerabilities Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com...

ASPCode CMS <= v1.5.8 Multiple Vulnerabilities

Exploit for asp platform in category web applications ============================================== ASPCode CMS yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS";...

60cycle CMS 2.5.2 Cross Site Request Forgery

======================================================================================== | Title : 60 cycleCMS V 2.5.2 CSRF Change Username & Password Exploit | Author : EL-KAHINA | Home : www.iqs3cur1ty.com/vb | Web Site : http://php.opensourcecms.com/scripts/details.php?scriptid=337 | Tested on...

Joomla Component com_iproperty 1.5.3 (id) SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== Joomla Component comiproperty 1.5.3 id SQL Injection Vulnerability ===================================================================== / / / \ \ \ \ \ / / \\ \ \ \ \ // //...

N'CMS local file include Vulnerability

Exploit for php platform in category web applications ====================================== N'CMS local file include Vulnerability ====================================== coded by ahmadbady //=========================================================================== // Topic : N'CMS Updated...

PHP Jokesite 2.0 - exec Command

PHP Jokesite 2.0 - exec Command ======================================================================================== | Title : PHP Jokesite V 2.0 exec command EXploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 ...

Pepsi CMS (Irmin cms) pepsi-0.6-BETA2 - Multiple Local File

Pepsi CMS Irmin cms pepsi-0.6-BETA2 - Multiple Local File Pepsi CMS Irmin cms pepsi-0.6-BETA2 Multiple Local File Vulnerability fucking the Web Apps LFI 1 - attack edition /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /...

Mortal network shopping system V8. 0 Simplified Chinese version of Cookie spoofing exploit-vulnerability warning-the black bar safety net

adchk. asp determine the administrator login state % if Request. Cookies"venshop""adminname"="" or Request. Cookies"venshop""adminpass"="" or Request. Cookies"venshop""adminclass"="" then Response. Cookies"venshop""adminname"="" Response. Cookies"venshop""adminpass"="" Response...

VisionGate 1.6 Cross Site Scripting

======================================================================================== | Title : VisionGate 1.6 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found :...

eStore 1.0.2 SQL Injection

===================================================================================================== .::Powered by eStore v1.0.2::. ===================================================================================================== x Author : R3VANBASTARD x Web : www.sux0r.net x Download:...

iDevAffiliate 4.0 Cross Site Scripting

======================================================================================== | Title : iDevAffiliate v4.0 XSS Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site : www.iq-ty.com | ...

Microsoft IIS 0Day Vulnerability in Parsing Files &#40;semi-colon bug&#41;

Microsoft IIS 0Day Vulnerability in Parsing Files semi-colon bug Application: Microsoft Internet Information Services - IIS All versions Impact: Highly Critical for Web Applications Finding Date: April 2007 Report Date: Dec. 2009 Found by: Soroush Dalili Irsdl 4t yahoo d0t com Website:...