what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 21 of 21

Files from Digital Security Research Group

XOOPS 2.3.1/2.3.2a Cross Site Scripting

Posted Dec 9, 2008

Authored by Digital Security Research Group | Site dsecrg.com

XOOPS versions 2.3.1 and 2.3.2a suffer from a stored cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 534f8f6aef7f2108ae837a182e4ce5048655e00d91deb8c48ef9603fc0d3a2d3

Download | Favorite | View

XOOPS 2.3.1 Local File Inclusions

Posted Dec 9, 2008

Authored by Digital Security Research Group | Site dsecrg.com

XOOPS version 2.3.1 suffers from multiple local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, file inclusion

SHA-256 | 54b099c150b887ab86caa338b11cff18f3adad66ee42ba0782d9a29563b137f5

Download | Favorite | View

DSECRG-08-039.txt

Posted Nov 19, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Pluck CMS version 4.5.3 suffers from a local file inclusion vulnerability in data/inc/lib/pcltar.lib.php.

tags | exploit, local, php, file inclusion

SHA-256 | a76b191f10fc38657780868a71a131bd66e626a9dafafb166d91e8d33d8c87f7

Download | Favorite | View

DSECRG-08-038.txt

Posted Aug 26, 2008

Authored by Digital Security Research Group | Site dsecrg.com

ezContents CMS version 2.0.3 suffers from multiple local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, file inclusion

SHA-256 | 5b392d4253a69ba1f8117510c21e9f1ebbdced0ce6339fb4559869611b4acf2e

Download | Favorite | View

DSECRG-08-037.txt

Posted Aug 26, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Pluck CMS version 4.5.2 suffers from multiple local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, file inclusion

SHA-256 | beddc1ce8725dcaee0c7917067ae3d99d8b0c7b92f3b44b3204fb87ff15b22ec

Download | Favorite | View

DSECRG-08-036.txt

Posted Aug 19, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Freeway eCommerce version 1.4.1.171 suffers from remote file inclusion, multiple local file inclusion, and cross site scripting vulnerabilities.

tags | exploit, remote, local, vulnerability, xss, file inclusion

SHA-256 | edd06b331501553efabc0fb143a64cf09d5253d9fe025cf029f82fcafd4326e8

Download | Favorite | View

DSECRG-08-035.txt

Posted Aug 8, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Gallery version 1.5.7 and 1.6-alpha3 suffer from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | ebb3687b57b82586a67f94319d168fb825fb1e5e7b36ec847729ac16fc9aced6

Download | Favorite | View

DSECRG-08-034.txt

Posted Jul 29, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Minishowcase Image Gallery version 09b136 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 12b716582a9d712e7b0fba19e2b78105451225184214e0320152c8035a60de3a

Download | Favorite | View

DSECRG-08-033.txt

Posted Jul 28, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Pixelpost PhotoBlog version 1.7.1 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 005aeac44994ed5d89df09371670cda8a4f56ea9bbfbf9fe5d3872d4c3f043dc

Download | Favorite | View

DSECRG-08-032.txt

Posted Jul 22, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Claroline eLearning and eWorking Platform version 1.8.10 suffers from cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 8a6fd8d055c7b39b99b5e06c88f885a8a11ce9a0d9b35e02b9bac37f97aaf94d

Download | Favorite | View

DSEGRG-08-31.txt

Posted Jul 21, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Interact E-Learning System version 2.4.1 suffers from a local file inclusion vulnerability in help/help.php.

tags | exploit, local, php, file inclusion

SHA-256 | 7003f34ab97d514a0fe8f635ebc4a2cc7142e9d616351bb1d5eceb47f8d7378f

Download | Favorite | View

DSECRG-08-030.txt

Posted Jul 18, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Claroline eLearning and eWorking Platform version 1.8.9 suffers from cross site scripting, unsigned redirect, and cross site request forgery vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | 02be8daca8f69a3f1b638e39798d9944506cab01d9693a79d02d38f17c13a045

Download | Favorite | View

DSECRG-08-029.txt

Posted Jul 17, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Dokeos E-Learning System version 1.8.5 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | df7b29ca06e5dd9587bac73d60d862dd5a3890250492ab6361c5a11b4f3876e9

Download | Favorite | View

DSECRG-08-028.txt

Posted Jul 17, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Velocity Web Server version 1.0 suffers from a directory traversal / arbitrary file download vulnerability.

tags | exploit, web, arbitrary

SHA-256 | 10c452b5a5c9164aae01ac3dcee2a2e7224655756343112d6bee3ab9ef454604

Download | Favorite | View

DSECRG-08-027.txt

Posted Jul 10, 2008

Authored by Digital Security Research Group | Site dsecrg.com

1024 CMS versions 1.4.3 and 1.4.4 RFC suffer from multiple local and remote file inclusion vulnerabilities.

tags | exploit, remote, local, vulnerability, file inclusion

SHA-256 | 377dd8b29f5fdc247e564b2308941f865d5a19b5c30977fc88c9e0dd97318354

Download | Favorite | View

DSECRG-08-026.txt

Posted Jun 17, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Open Azimyt CMS version 0.22 minimal and 0.21 stable suffer from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | e80572e10f47ad7be044ddf5d5fc6f2fa45928c3249e681d804cc7a3f2ee1f5a

Download | Favorite | View

DSECRG-08-025.txt

Posted May 23, 2008

Authored by Digital Security Research Group | Site dsecrg.com

OneCMS version 2.5 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 1e1c3798a432c7fbbeea5043f90c3a37bed73f023c90bf2ff57672d23df4e435

Download | Favorite | View

DSECRG-08-024.txt

Posted May 23, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Quate CMS version 0.3.4 suffers from remote file inclusion, local file inclusion, directory traversal, and multiple cross site scripting vulnerabilities. Everything about this application screams run away.

tags | exploit, remote, local, vulnerability, xss, file inclusion

SHA-256 | 955aa3bfe6d8529e5ca3c4eacd839d624668d2140f3ed9c45ee1d3b6f8c01fdd

Download | Favorite | View

DSECRG-08-020-1.txt

Posted May 22, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Alcatel OmniPCX Office versions since 210/061.1 suffers from a remote command execution vulnerability.

tags | exploit, remote

SHA-256 | cb231184b6e74c18bec49605a47ea8001a95bf856e033b52d1dcad55ad8c0696

Download | Favorite | View

DSECRG-08-023.txt

Posted May 22, 2008

Authored by Digital Security Research Group | Site dsecrg.com

The SAP Web Application Server version 7.0 suffers from a cross site scripting vulnerability.

tags | exploit, web, xss

SHA-256 | 6be762e090a1f13f2f8e8f12f41f7cc5da71aebabaf09108c6522b7549850d5f

Download | Favorite | View

DSECRG-08-017.txt

Posted Mar 3, 2008

Authored by Digital Security Research Group | Site dsecrg.com

Flyspray version 0.9.9.4 suffers from multiple cross site scripting vulnerabilities.

tags | advisory, vulnerability, xss

SHA-256 | 962300b509833e0b24bb1da3e5e35aabc7e76971531b9b6451a9e91f6f6d8ded

Download | Favorite | View