WebsiteBaker 2.8.1 - DataBase Backup Disclosure

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : WebSiteBaker 2.8.1 DataBase Backup Exploit Date : 25 - 3 - 2010 Author : Tr0y-x Version : 2.8.1 & May Be Later Tested On : Windows & Linux My Home : WwWDoTSeC-WaRDoTCoM Contact Me : EgAtHackDoTCl...

WebsiteBaker CMS lack of sanitizing

WebsiteBaker CMS lack of sanitizing Discovered by: Nomenumbra Date: 6/4/2006 impact:moderate privilege escalation,possible defacement A user's display name isn't filtered at all, allowing them to insert any HTML of javascript code at will. Nomenumbra/0x4F4C...