Contexis CMS 1.0 Cross Site Scripting

CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss Severity: Medium Vendor: exis-ti.com Versions Affected: 1.0 Description: The contexist has be found the reflected XSS Vulnerability if use the photo gallery model someone can insert xss code at the url executing javascript codes on the web. Exploit: G...

LightNEasy 2.2.1 Stored XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Notices CSRF / XSS

1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 0 x Official Website: http://www.1337day.com 1 1 x...

Wordpress Plugin Notices - CSRF & XSS Vulnerability

Exploit for php platform in category web applications 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1...

Social Engine 4 Cross Site Scripting

===================================================== Social Engine 4 Persistent XSS & Non-Persistent XSS ===================================================== :----------------------------------------------------------------------------------------------------------------------------------------...

vBulletin 4.1.12 Cross Site Scripting

TITLE ....... vBulletin 4.1.12 Reflected XSS try csrf for registered users DATE ........ 24.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.vbulletin.com VERSION ..... 4.1.12 TESTED ON ... LAMP ----------------------------------------------------------------------- 1...

Fortune3 Cross Site Scripting

Exploit Title: Fortune3 Cross Site Scripting Date: 18.04.2012 Author: Sony Software Link: http://www.fortune3.com/ Google Dorks: Powered by FORTUNE3 Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/fortune3-cross-site-scripting.html...

GNUBoard 4.34.20 - 'download.php' HTML Injection

source: https://www.securityfocus.com/bid/52622/info Gnuboard is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of the affected...

idev-BusinessDirectory 3.0 Cross Site Scripting

Title : idev-BusinessDirectory 3.0 Vulnerability Author : Red Security TEAM Date : 25/02/2012 Demo : http://www.idevspot.com/demos/idev-businessdirectory/ Dork : "Business Directory Software :: idev-BusinessDirectory 3.0" Tested On : CentOS Contact : Info at RedSecurity . COM Home :...

MoniWiki Cross Site Scripting

Exploit Title: MoniWiki Cross Site Scripting Date: 17.02.2012 Author: Sony Software Link: http://moniwiki.kldp.net/wiki.php Google Dorks: inurl:EnUserPreferences intext:moniwiki Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

SeedWiki Cross Site Scripting

Exploit Title: SeedWiki Cross Site Scripting Date: 8.02.2012 Author: Sony Software Link: http://www.seedwiki.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/seedwiki-cross-site-scripting.html...

Voy Forums Cross Site Scripting

Exploit Title: Voy Forums Cross Site Scripting Date: 29.01.2012 Author: Sony Software Link: http://www.voy.com Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/voy-forums-cross-site-scripting.html...

ARASTAR Portal System Cross Site Scripting

ARASTAR Portal System search.php XSS Vulnerability Software : ARASTAR Date : 1/13/2012 Vendor : http://www.ara-star.com Get App. : http://www.ara-star.com/sale.php?sale=3 Price : $480 Dork : site:.il intext:"powered by ARASTAR" Author : ITTIHACK Home : http://ittihack.com Vulnerable File :...

WebEmlak Real Estate Cross Site Scripting

Exploit Title: WebEmlak Real Estate Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Cross Site Scripting can be done using the URL input Vulnerable Page: index.php Example: index.php/ Exploit:...

Elite CMS 1.01 Cross Site Request Forgery / Cross Site Scripting

Name: Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities Author: 10n1z3d Date: Sat 10 Jul 2010 08:05:44 PM EEST Vendor: http://elitecms.net/ Download: http://elitecms.net/download.php?download=eliteCMS -= CSRF PoC 1 - Change Admin Password =- Elite CMS 1.01 Multiple XSS/CSRF Vulnerabilities - Chang...

Havij 1.10 - Persistent Cross-Site Scripting

Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows XP Service Pack 2 Professional, Windows 7 Code : htttp://site.com/file.php?param=XSS Code Havij Persistent XSS =v1.10 By : Hkhexon [email protected] ------------- Vulnerability...

Caucho Technology Resin digest.php Cross Site Scripting Vulnerability

This vulnerability do not need to login.digest.php use the REQUEST method in a wrong way to accept parametersthe malicious user could submit xss code on this page and an attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. exp:...

PHP Quick Arcade 3.0.21 - Multiple Vulnerabilities

PHP Quick Arcade 3.0.21 - Multiple Vulnerabilities PHP Quick Arcade 3.0.21 Multiple Vulnerabilites ----------------------------------------------------------- Title: PHP-Quick-Arcade 3.0.21 Multiple Vulnerabilites Vendor: http://quickarcade.jcink.com/...

PHP-Quick-Arcade 3.0.21 Cross Site Scripting / SQL Injection

PHP Quick Arcade 3.0.21 Multiple Vulnerabilites ----------------------------------------------------------- Title: PHP-Quick-Arcade 3.0.21 Multiple Vulnerabilites Vendor: http://quickarcade.jcink.com/ ----------------------------------------------------------- AUTHOR: ITSecTeam Email:...

Joomla WebcamXP Cross Site Scripting

Joomla Component comwebcamxp Cross Site Scripting Vulnerabilities Author : Pyske Name : comwebcamxp Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix Advice :...