what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 126 - 140 of 140

Files from Tim Coen

Serendipity 2.0.1 Cross Site Scripting

Posted Sep 1, 2015

Authored by Tim Coen | Site curesec.com

Serendipity version 2.0.1 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | c5bb0de562827a84cc9517608a99cba0414afb31ae2e75403eb88eff2c88e92e

Download | Favorite | View

Serendipity 2.0.1 Blind SQL Injection

Posted Sep 1, 2015

Authored by Tim Coen | Site curesec.com

Serendipity version 2.0.1 suffers from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 69ba08e31cb826124bba2f513a904410bdd99843b3b94780f7e8b93ccdb55f57

Download | Favorite | View

NibbleBlog 4.0.3 Shell Upload

Posted Sep 1, 2015

Authored by Tim Coen | Site curesec.com

NibbleBlog version 4.0.3 suffers from a shell upload vulnerability.

tags | exploit, shell

SHA-256 | ef282d419a01715b09d7677739648d1c9338641d8ca1daded57d00f12a1fd3b1

Download | Favorite | View

Serendipity 2.0.1 Shell Upload

Posted Sep 1, 2015

Authored by Tim Coen | Site curesec.com

Serendipity version2.0.1 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | 671892062ef4118fe83fbe5821d80b6695057fb12b4ba258267f753e16a9d587

Download | Favorite | View

NibbleBlog 4.0.3 Cross Site Request Forgery

Posted Sep 1, 2015

Authored by Tim Coen | Site curesec.com

NibbleBlog version 4.0.3 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 384d0a90cd7d4ba71ecac35c25750973c050f7be788b0e5bbd5b3214003ceb21

Download | Favorite | View

ModX Revolution 2.3.5-pl Cross Site Scripting

Posted Aug 18, 2015

Authored by Tim Coen | Site curesec.com

ModX Revolution version 2.3.5-pl suffers from a reflective cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 3d152bdf6a33c468ed0fa3c3f2478aaa3e820a7da98eefd3efe8ac2787df02a8

Download | Favorite | View

Bolt 2.2.4 Shell Upload

Posted Aug 18, 2015

Authored by Tim Coen | Site curesec.com

Bolt version 2.2.4 suffers from a code execution vulnerability via shell upload.

tags | exploit, shell, code execution

SHA-256 | e2c1943ef583db95a7975023c3a7c4ab89af5a7177598fe0614687c3b777d362

Download | Favorite | View

Phorum 5.2.19 Cross Site Scripting / Open Redirect

Posted Aug 18, 2015

Authored by Tim Coen | Site curesec.com

Phorum version 5.2.19 suffers from open redirection and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | bc90d6b53c23a8d4bab8948215ef1624906d96091b68d72f6596b40f2820ec1f

Download | Favorite | View

CodoForum 3.3.1 SQL Injection

Posted Aug 10, 2015

Authored by Tim Coen | Site curesec.com

CodoForum version 3.3.1 suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | 91066315f737146476dcdfe6bb560572770dbaea41512d22331b81f27db3e839

Download | Favorite | View

CodoForum 3.3.1 Cross Site Scripting

Posted Aug 10, 2015

Authored by Tim Coen | Site curesec.com

CodoForum version 3.3.1 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 38ac3fd88850f9b8f4a3ac2aad2fca48b587bfcfdb7a0bf3e350208c6b546df1

Download | Favorite | View

BigTree CMS 4.2.3 SQL Injection

Posted Aug 10, 2015

Authored by Tim Coen | Site curesec.com

BigTree CMS version 4.2.3 suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | 5dc87355d3c200a0df0574922b630754585bfa8aabf957535a5fba949f2256e0

Download | Favorite | View

BigTree CMS 4.2.3 Cross Site Scripting

Posted Aug 10, 2015

Authored by Tim Coen | Site curesec.com

BigTree CMS version 4.2.3 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 41ec015cd23ee973abed929e8915ac8a81865e5ac54eebda4161811accd977c2

Download | Favorite | View

GetSimpleCMS 3.3.5 XSS / Code Execution / DoS / Weak Auth

Posted Jul 15, 2015

Authored by Tim Coen

GetSimpleCMS version 3.3.5 suffers from weak authentication, password leak, code execution, cross site scripting, and denial of service vulnerabilities.

tags | exploit, denial of service, vulnerability, code execution, xss

SHA-256 | 9e524b7da4c827b7782b84debb83677baaca15fd0aaa97f53ec59a867d8bd0c7

Download | Favorite | View

ZenPhoto 1.4.8 XSS / SQL Injection / Traversal

Posted Jul 13, 2015

Authored by Tim Coen

ZenPhoto version 1.4.8 suffers from cross site scripting, remote SQL injection, and path traversal vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, file inclusion

SHA-256 | d8ac8f183d1d83a55e0514b55a42e896c2fbe078def6d3131a282f96d26b3c8b

Download | Favorite | View

PivotX 2.3.10 Session Fixation / XSS / Code Execution

Posted Jun 28, 2015

Authored by Tim Coen

PivotX version 2.3.10 suffers from session fixation, code execution, and cross site scripting vulnerabilities.

tags | exploit, vulnerability, code execution, xss

SHA-256 | 46674e4415ac3578e9c37660f047a58b4394e048c244adbc09b59b34d6626102

Download | Favorite | View