XSRF (CSRF) in Zomplog

Vulnerability ID: HTB22645 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: CSRF Cross-Site Request...

Zomplog 3.9 Cross Site Request Forgery / Cross Site Scripting

============================================== Vulnerability ID: HTB22643 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog1.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13...

Zomplog 3.9 Cross Site Scripting

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

Stored XSS vulnerability in Zomplog

Vulnerability ID: HTB22643 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog1.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in Zomplog

Vulnerability ID: HTB22642 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

XSS vulnerability in Zomplog

Vulnerability ID: HTB22644 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog2.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: XSS Cross Site...

Zomplog 3.9 Multiple XSS & XSRF Vulnerabilities

Exploit for php platform in category web applications =============================================== Zomplog 3.9 Multiple XSS & XSRF Vulnerabilities =============================================== Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog1.html Product: Zomplog Vendor:...

Zomplog 3.9 - Multiple Cross-Site Scripting Cross-Site Request Forgery Vulnerabilities

Zomplog 3.9 - Multiple Cross-Site Scripting Cross-Site Request Forgery Vulnerabilities Vulnerability ID: HTB22643 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog1.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably pri...

Zomplog 3.9 - Cross-Site Request Forgery

Vulnerability ID: HTB22645 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: CSRF Cross-Site Request...

Zomplog 3.9 - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities

Vulnerability ID: HTB22643 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzomplog1.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability Type: Stored XSS Cross...

Zomplog 3.9 - Cross-Site Request Forgery

Zomplog 3.9 - Cross-Site Request Forgery Vulnerability ID: HTB22645 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinzomplog.html Product: Zomplog Vendor: Gerben Schmidt http://www.zomp.nl/zomplog/ Vulnerable Version: 3.9 and probably prior versions Vendor Notification: 13 October 2010...

Multiple Vulnerabilities in Zomplog

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zomplog which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in Zomplog 1.1 The vulnerability exists due to input sanitation...

Zomplog CMS 3.9 Cross Site Request Forgery / Cross Site Scripting

Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Create Admin User...

Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities

Exploit for php platform in category web applications ================================================= Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities ================================================= Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download:...

Zomplog 3.9 - Cross-Site Scripting Cross-Site Request Forgery

Zomplog 3.9 - Cross-Site Scripting Cross-Site Request Forgery Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF...

Zomplog 3.9 - message Cross-Site Scripting

Zomplog 3.9 - message Cross-Site Scripting souce: https://www.securityfocus.com/bid/42457/info Zomplog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Zomplog 3.9 - Cross-Site Scripting / Cross-Site Request Forgery

Date: Sun 15 Aug 2010 04:33:33 PM EEST Vendor: http://www.zomp.nl/zomplog/ Download: http://www.zomp.nl/zomplog/downloads/zomplog/zomplog3.9.zip --- -= CSRF PoC 1 - Change Admin Password =- Zomplog CMS 3.9 Multiple XSS/CSRF Vulnerabilities - Change Admin Password...

Zomplog 3.9 - 'message' Cross-Site Scripting

souce: https://www.securityfocus.com/bid/42457/info Zomplog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Zomplog 3.9 XSS exploit-vulnerability warning-the black bar safety net

漏洞 文件 index.php Vulnerability code: 1 0: // some general xxs protection 1 1: $GET’search’ = strreplace’script’, ’, $GET’search’; 1 2: $GET’username’ = strreplace’script’, ’, $GET’username’; Code just remove the script file keyword, the page is vulnerable toXSSattack POC...

Zomplog 3.9 XSS Vulnerability

Exploit for php platform in category web applications ============================= Zomplog 3.9 XSS Vulnerability ============================= Title: Zomplog 3.9 XSS Vendor: http://www.zomp.nl Dork: "Powered by Zomplog" AUTHOR: ITSecTeam Email: email protected Website: http://www.itsecteam.com...