Unfixed XSS vulnerability at www.podcastfm.co.uk

Security researcher IrIsT.Ir, has submitted on 25/12/2011 a cross-site-scripting XSS vulnerability affecting www.podcastfm.co.uk, which at the time of submission ranked 2065922 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

BeeSns microblogging system V0. 2 elevation of Privilege 0day and exp-vulnerability warning-the black bar safety net

Publishing author: sub-meter Affected versions: BeeSns V0. 2 Official address: http://www.beesns.com/ Vulnerability type: elevation of Privilege Vulnerability analysis: IP filter is not strict,causing the user can submit malicious parameters to enhance their own privileges. This microblogging...

Unfixed XSS vulnerability at find.dk

Security researcher hopihavet, has submitted on 10/06/2010 a cross-site-scripting XSS vulnerability affecting find.dk, which at the time of submission ranked 942464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently...

DMXReady Secure Document Library Persistent XSS Vulnerability

Exploit for php platform in category web applications ============================================================= DMXReady Secure Document Library Persistent XSS Vulnerability =============================================================...

php168 5.0 job.php 信息泄漏漏洞

漏洞分析 看job.php 92行 elseif$job=="download" $rsdb=$db-getone"SELECT FROM $prearticle WHERE aid='$id'"; $fidDB=$db-getone"SELECT FROM $presort WHERE fid='$rsdbfid'"; if$fidDBadmin&&$lfjid $detail=explode",",$fidDBadmin; if inarray$lfjid,$detail $webadmin=1;...

Batch Picture Watemark 1.0 (.jpg File) Local Crash PoC

Exploit for unknown platform in category dos / poc ====================================================== Batch Picture Watemark 1.0 .jpg File Local Crash PoC ====================================================== Anti-Security Research Team & Security Institute + Bug : Batch Picture Watemark v1....

SkyPortal Classifieds System 0.12 Contents Change Vulnerability

Exploit for unknown platform in category web applications =============================================================== SkyPortal Classifieds System 0.12 Contents Change Vulnerability =============================================================== @email protected @=Script :SkyPortal Classified...

Kasseler CMS 1.1.0/1.2.0 Lite Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Kasseler CMS 1.1.0/1.2.0 Lite Remote SQL Injection Vulnerabilities ==================================================================...

emagiC CMS.Net 4.0 - 'emc.asp' SQL Injection

-------------------- emagiC CMS.Net v4.0 Remote SQL Injection Exploit -------------------- + Found : hak3r-b0y + Gr33tz : darko , V4 CrackerS , hackeralQassam , Ans , Barra, all ans-hacker.com members + Script URL : http://www.emagic-cms.com/ + D0rk : inurl:emc.asp?pageid= --------------------...

downstat18.txt

DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE: downstat 1.8 VENDOR URL: http://vmist.net/index.php?script=Downstat DORKs: "Login To Downstat 1.8" allinurl:"/downstat/" NOTES: greetz to: neo-vortex, sk0tie, icez. visit @ irc.bluehell.org silenz VULN CODE: ------ admin.ph...

OPENi-CMS 1.0.1(config) Remote File Inclusion Vulnerability

Update: 22:44 09/11/06 Subject: "OPENi-CMS 1.0.1config Remote File Inclusion Vulnerability " Vulnerable version: OPENi-CMS 1.0.1 Operating System: - All OS Vendor URL: Support - [email protected] Website - http://www.openi-cms.org/ Description: Openi-CMS he one software PHP Content Management...

12allSQL.txt

1-2-All Broadcast E-mail Software POC Supplying the following is sufficient to gain access to the admin control panel: Target : http://www.example.com/12allTarget/admin/index.php Username: ' or 1=1 / Password: NothingBlank Report By : POPO FromIRAN www.Babol-Hackers.com [email protected] Y! ID :...