Flying Cart Cross Site Scripting

Cross Site Scripting on Online Store Flying Cart Risk: Low CWE number: CWE-79 Date: 19/05/2014 Vendor: Flying Cart Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?p=xss PoC: -Target:...

Artikel CMS Cross Site Scripting

Cross Site Scripting on Artikel CMS Risk: Low CWE number: CWE-79 Date: 19/05/2014 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php?action=xss PoC: -Target: www.pontonmade.com -Vuln. File:...

Perseus' Java Hopper Cross Site Scripting

Cross Site Scripting on Perseus' Java Hopper Risk: Low CWE number: CWE-79 Date: 19/05/2014 Project: perseus.tufts.edu Download: sourceforge.net/projects/perseus-hopper Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: morph?l= Exploit:...

LogiVert Webshop Software Cross Site Scripting

Cross Site Scripting on LogiVert Webshop Software Risk: Low CWE number: CWE-79 Date: 23/04/2014 Vendor: www.logivert.com Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http:/host/index.php%3fitem=xss PoC: - Target:...

CMS Morpheus SQL Injection

SQL Injection on CMS Morpheus Risk: High CWE number: CWE-89 Date: 19/04/2014 Vendor: www.pixel-dusche.de Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http://www.site.com/index.php?cid=SQLI...

Indeziner CMS Cross Site Scripting

Cross Site Scripting on INDEZINER CMS Risk: Low CWE number: CWE-79 Date: 19/04/2014 Vendor: indeziner.com Author: Felipe Gabriel Renzi Contact: [email protected] Tested on Windows 8 pro Vulnerable File: vendorprofile.php Exploit: http://host/vendorprofile.php?vendorid=xss PoC: - Target:...

DuBose Web Group CMS Cross Site Scripting

Cross Site Scripting on DuBose Web Group CMS Risk: Low CWE number: CWE-79 Date: 19/04/2014 Vendor: www.duboseweb.com Author: Felipe Gabriel Renzi Contact: [email protected] Tested on Windows 8 pro Vulnerable File: product.php Exploit: http://host/path/product.php?pname=xss PoC: - Target:...

CMS iCAT Cross Site Scripting

Cross Site Scripting on CMS iCAT Risk: Low CWE number: CWE-79 Date: 15/04/2014 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: /index.php Exploit: http://host/index.php?seite=xss PoC: - Target: partner.ruegg-cheminee.com - Vuln. File:...

Joomla Wrapper Cross Site Scripting

Cross Site Scripting on Joomla "comwrapper" Risk: Low CWE number: CWE-79 Date: 15/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=comwrapper&itemid= Exploit: -Target: http://host.com -Vuln. Fil...

Joomla SMF Cross Site Scripting

Cross Site Scripting on Joomla "comsmf" Risk: Low CWE number: CWE-79 Date: 15/04/2014 Project: www.joomla.org Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php?option=comsmf&itemid= Exploit: -Target: http://host.com -Vuln. File:...

CMS Int24 SQL Injection

SQL Injection on CMS int24 Risk: High CWE number: CWE-89 Date: 14/04/2014 Vendor: www.int24.com.pl Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: galeria.php Exploit: http://host/galeria.php?cid=SQLI...

WebLife CMS SQL Injection

Mulitple SQL Injection on WebLife CMS Risk: High CWE number: CWE-89 Date: 09/04/2014 Vendor: www.weblife.sk Author: Felipe "Renzi" Gabriel Contact: [email protected] Tested on Windows 8 pro Vulnerable File: index.php Exploit: http://host/index.php?jazyk=SQLI http://host/index.php?page=SQLI PoC:...