CVE-2012-1898

Multiple cross-site scripting XSS vulnerabilities in wolfcms/admin/user/add in Wolf CMS 0.75 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 useremail, or 3 userusername parameters...

CVE-2012-1897

CVE-2012-1897 affects Wolf CMS 0.75 and earlier. The issue is multiple cross-site request forgery (CSRF) vulnerabilities in the admin interface that allow remote attackers to hijack administrator authentication to perform actions such as (1) deleting users by user id (admin/user/delete), (2) dele...

CVE-2012-1898

CVE-2012-1898 affects Wolf CMS 0.75 and earlier, with multiple XSS vulnerabilities in the admin/user/add path that allow remote attackers to inject arbitrary script or HTML via user[name], user[email], or user[username]. Root cause is improper handling of user input in the add user form, enabling...

Wolf CMS / Frog CMS BD uploadR Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wolf CMS and Frog CMS Plugins - BD uploadr Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wolf CMS 0.75 Persistent Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Wolfcms al...

Wolf CMS v0.7.5 - Multiple Web Vulnerabilities

Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU...

Wolf CMS 0.7.5 - Multiple Vulnerabilities

Wolf CMS 0.7.5 - Multiple Vulnerabilities Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is...

Wolf CMS 0.7.5 Cross Site Scripting / SQL Injection

Exploit for php platform in category web applications Title: ====== Wolf CMS 0.7.5 Cross Site Scripting / SQL Injection Date: ===== 2012-02-27 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU General Public License v3. Wolf CMS is...

Wolf CMS 0.7.5 - Multiple Vulnerabilities

Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU...

Wolf CMS 0.7.5 Cross Site Scripting / SQL Injection

Title: ====== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities Date: ===== 2012-02-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=452 VL-ID: ===== 452 Introduction: ============= Wolf CMS is a content management system and is Free Software published under the GNU...

Wolf CMS v0.7.5 - Multiple Web Vulnerabilities

Document Title: =============== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=452 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 452 Product ...

Wolf CMS v0.7.5 - Multiple Web Vulnerabilities

Document Title: =============== Wolf CMS v0.7.5 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=452 Release Date: ============= 2012-02-27 Vulnerability Laboratory ID VL-ID: ==================================== 452 Product ...

Operation Cupcake : MI6 hacks al-Qaeda website !

As part of its cyber-warfare operations, British spy agency MI6 has hacked into an al-Qaeda online magazine and replaced ''bomb-making '' instructions with a recipe for cupcakes, a media report said. The operation was launched by MI6 in an attempt to disrupt efforts by al-Qaeda in the Arabian...

Operation Cupcake : MI6 hacks al-Qaeda website !

As part of its cyber-warfare operations, British spy agency MI6 has hacked into an al-Qaeda online magazine and replaced ''bomb-making'' instructions with a recipe for cupcakes, a media report said. The operation was launched by MI6 in an attempt to disrupt efforts by al-Qaeda in the Arabian...

Wolf CMS (v.0.7.5) Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wolf CMS 0.7.5 Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

XSS vulnerability in Wolf CMS

Vulnerability ID: HTB22680 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwolfcms2.html Product: Wolf CMS Vendor: Wolf CMS team http://www.wolfcms.org/ Vulnerable Version: 0.6.0b and probably prior versions Vendor Notification: 09 November 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in Wolf CMS

Vulnerability ID: HTB22679 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwolfcms1.html Product: Wolf CMS Vendor: Wolf CMS team http://www.wolfcms.org/ Vulnerable Version: 0.6.0b and probably prior versions Vendor Notification: 09 November 2010 Vulnerability Type: Stored XSS Cross...

XSRF (CSRF) in Wolf CMS

Vulnerability ID: HTB22681 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinwolfcms.html Product: Wolf CMS Vendor: Wolf CMS team http://www.wolfcms.org/ Vulnerable Version: 0.6.0b and probably prior versions Vendor Notification: 09 November 2010 Vulnerability Type: CSRF Cross-Site Request...