runcms-xss.txt

Title: RunCMS XSS Vulnerability via User Agent Vendor: RunCMS Product: RunCMS Tested Version: 2.1 Threat Class: XSS Severity: Medium Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== RunCMS is prone to a XSS vulnerability by mangling the user-agent field on a http...

MODx Installation File XSS Vulnerability

Title: MODx Installation File XSS Vulnerability Vendor: MODx Product: MODx CMF Tested Versions: 1.0.3, 1.0.4 Threat Class: XSS Severity: Medium Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== MODx CMF is prone to a XSS vulnerability caused by unsanitized user inp...

RunCMS XSS Vulnerability via User Agent

Title: RunCMS XSS Vulnerability via User Agent Vendor: RunCMS Product: RunCMS Tested Version: 2.1 Threat Class: XSS Severity: Medium Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== RunCMS is prone to a XSS vulnerability by mangling the user-agent field on a http...

CVE-2010-2659

Opera before 10.50 on Windows, before 10.52 on Mac OS X, and before 10.60 on UNIX platforms makes widget properties accessible to third-party domains, which allows remote attackers to obtain potentially sensitive information via a crafted web site...

CVE-2010-2658

Opera before 10.60 does not properly restrict certain interaction between plug-ins, file inputs, and the clipboard, which allows user-assisted remote attackers to trigger the uploading of arbitrary files via a crafted web site...

How to Run a Scareware Campaign

The infection routines being used by some scareware and rogue AV gangs are much more comprehensive and far-reaching than many current analyses have shown, experts say, including some attacks that not only place a malicious script on a compromised server, but infect every single legitimate script ...

Oxygen2PHP 1.1.3 - 'post.php' Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./post.php?action=newthread&fid='+OR+1!=SELECT...

Joomla Component com_jvb_bridge RFI Vulnerability

Exploit for php platform in category web applications ================================================= Joomla Component comjvbbridge RFI Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'...

PHP car rental complete System V1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== PHP car rental complete System V1.2 SQL Injection Vulnerability =============================================================== Title:PHP car rental complete System V1.2 SQli...

Realtor Website System E-Commerce SQL Injection

=============================================== Realtor WebSite System E-Commerce SQL Injection Vulnerability =============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || Realtor WebSite System E-Commerce S...

Realtor WebSite System E-Commerce - SQL Injection

Realtor WebSite System E-Commerce - SQL Injection =============================================== Realtor WebSite System E-Commerce SQL Injection Vulnerability =============================================== .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| |||||||...

PHP Graphy 0.9.7 - 'index.php' Remote Command Execution

----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o | ------------------------------------------------------------ Remote Command Execution Vulnerability...

Memorial Web Site Script SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Memorial...

Memorial Web Site Script - Reset Password / Insecure Cookie Handling

----------------------------------------------------------------------- Memorial Web Site Script -- Reset Password & Insecure Cookie Handling ----------------------------------------------------------------------- Author : Chip D3 Bi0s Email : chipdebiosalt+64gmail.com Where : From Remote Group :...

Memorial Web Site Script (id) SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Memorial Web Site Script id SQL Injection Vulnerability ========================================================= Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : April,...

Memorial Web Site Script --> Reset Password & Insecure Cookie Handling

Exploit for php platform in category web applications ====================================================================== Memorial Web Site Script -- Reset Password & Insecure Cookie Handling ======================================================================...

php168 whole Station system of CSRF attack-vulnerability warning-the black bar safety net

CSRF is Cross Site Request Forgery abbreviation, the Chinese meaning is cross-site request forgery, it was written as XSRF。 Hack Forge of the target user's HTTP request, then the HTTP request sent to a CSRF vulnerability in the web site. There is a CSRF vulnerability of the site to perform a forg...

Microsoft Windows Media Player ActiveX Codec Retrieval (CVE-2010-0268)

Microsoft Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video. A remote code execution vulnerability has been reported in the Windows Media Player's ActiveX control. The vulnerability is due to an error in the Windows...

Nine days of self-help built Station system Xday-vulnerability warning-the black bar safety net

Keywords: inurl:/regTemletSel. asp? step=2 Or E-Commerce self-help built Station-your ideal assistant Use method: 1 registered 2 web site management---resource management---upload hackqing. asp;qing.jpg 3get a webshell Special case: 1. the forced name change 2. the iis parsing vulnerability is...

Microsoft Internet Explorer Unspecified vulnerability

This host is installed with Microsoft Internet Explorer and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbmsieunspecifiedvuln.nasl 5656 2017-03-21 11:03:12Z cfi $ Microsoft Internet Explorer Unspecified vulnerability Authors: Madhuri D Copyright: Copyright c 2010...