what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 74

Files

AdaptCMS 2.0.1 Cross Site Scripting / Bypass

Posted Sep 26, 2011

Authored by Stefan Schurtz

AdaptCMS version 2.0.1 suffers from cross site scripting, information disclosure, and authentication bypass vulnerability.

tags | exploit, xss, bypass, info disclosure

SHA-256 | 590b7718119cef4f5699e5608269f589d7d8c1bf22f040468240a2227b4dacf8

Download | Favorite | View

Related Files

AdaptCMS 3.0 Cross Site Scripting

Posted May 7, 2015

Authored by Provensec

AdaptCMS version 3.0 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 71bae6992093d7256402d6bb35991c1169834d1e7e27df9ae1979cad08ac0d65

Download | Favorite | View

AdaptCMS 3.0.3 Remote Command Execution

Posted Jan 5, 2015

Authored by LiquidWorm | Site zeroscience.mk

AdaptCMS version 3.0.3 suffers from an authenticated arbitrary command execution vulnerability. The issue is caused due to the improper verification of uploaded files. This can be exploited to execute arbitrary PHP code by creating or uploading a malicious PHP script file that will be stored in '\app\webroot\uploads' directory.

tags | exploit, arbitrary, php

SHA-256 | 5b566183baf344d655c35712b81e46cf526107609f4fd7b1bd1927b963915827

Download | Favorite | View

AdaptCMS 3.0.3 HTTP Referer Header Open Redirect

Posted Jan 5, 2015

Authored by LiquidWorm | Site zeroscience.mk

AdaptCMS version 3.0.3 suffers from an open redirection vulnerability due to giving implied trust to the HTTP Referer header.

tags | exploit, web

SHA-256 | 0bae89972bb325d03e3e953fa608c002315df2ecd8d8f8c85d95edac75c9d692

Download | Favorite | View

AdaptCMS 3.0.3 Cross Site Scripting

Posted Jan 5, 2015

Authored by LiquidWorm | Site zeroscience.mk

AdaptCMS version 3.0.3 suffers from multiple persistent cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 6f9af3f51b4bdd59ee2d675c919d9ac43718212e55595b6445dfc42030c32c48

Download | Favorite | View

reg.ebay.com Cross Site Scripting

Posted May 26, 2014

Authored by Stefan Schurtz

reg.ebay.com suffered from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 2bce10c659480dadfc71d35f3d359939f8c6abe9c02b2c900470d1756ad5480c

Download | Favorite | View

Yahoo ads.yahoo.com Cross Site Scripting

Posted Mar 9, 2014

Authored by Stefan Schurtz

ads.yahoo.com suffered from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 0f33736218eefb4fae1b4f1af47d1766ea967a7ee4793d3a1eff2e9221740285

Download | Favorite | View

Yahoo intl Cross Site Scripting

Posted Mar 9, 2014

Authored by Stefan Schurtz

The cookie intl parameter on de-mg42.mail.yahoo.com suffered from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 8bc6ea197fed8679d548461f2f3ddbf74dcf43a82a7cb8a447d4c145debd8a70

Download | Favorite | View

Bing Cross Site Scripting

Posted Jan 27, 2014

Authored by Stefan Schurtz

ssl.bing.com suffered from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 37d160ce1d252a3d686efc9a22c7753044cf3ac7a500c95dae704ffd2fc6b168

Download | Favorite | View

Yahoo! Open Redirect

Posted Jan 12, 2014

Authored by Stefan Schurtz

The piggyback parameter on ads.yahoo.com is prone to an open redirect vulnerability. Yahoo! addressed this by simply not fixing it and removing it from the bug bounty scope.

tags | exploit

SHA-256 | 50c6a4f2d1b103f3063eff08517e16411735828edf4dfd0f56e57844ec8da341

Download | Favorite | View

WordPress WP-Members 2.8.9 Cross Site Scripting

Posted Jan 8, 2014

Authored by Stefan Schurtz

WordPress WP-Members plugin version 2.8.9 suffers from persistent and reflective cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 385a5905db87d16b541ccca93a3f6fdc33d755988788c62aba7d2398acab7e99

Download | Favorite | View

AdaptCMS 3.0.1 Cross Site Scripting

Posted Oct 11, 2013

Authored by syst3m_f4ult

AdaptCMS version 3.0.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 4f69e17362e1d3e3727d1e8458a9b8c39609e4b39a547dacffe89ebb93f75936

Download | Favorite | View

Apple Cross Site Scripting

Posted Jun 9, 2013

Authored by Stefan Schurtz

store.apple.com suffers from a cross site scripting vulnerability.

tags | exploit, xss

systems | apple

SHA-256 | 59d341e419ad20e5abad5c9c3ba623f9974be3df20836013feb8482f3aec70cf

Download | Favorite | View

Netcraft.com Cross Site Scripting

Posted May 14, 2013

Authored by Stefan Schurtz

www.netcraft.com suffered from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 634e49019e0df121608fd4d662505b0de9358f848a8db182c17e5f6f967896a9

Download | Favorite | View

Yahoo mode Cross Site Scripting

Posted Mar 9, 2013

Authored by Stefan Schurtz

The mode parameter on celebrity.yahoo.com, movies.yahoo.com, and music.yahoo.com suffered from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 913fb4b26dfe6be847660658730f8da43bbc26309738ea2037331f12f76b91f8

Download | Favorite | View

Secunia Security Advisory 52058

Posted Feb 5, 2013

Authored by Secunia | Site secunia.com

Secunia Security Advisory - Multiple vulnerabilities have been discovered in AdaptCMS, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks.

tags | advisory, vulnerability, xss, sql injection

SHA-256 | cfe99d89e7026e32f6242b294aac518f95da5cead98c53040f850299523e5618

Download | Favorite | View

AdaptCMS 2.0.4 SQL Injection

Posted Feb 2, 2013

Authored by kallimero

AdaptCMS versions 2.0.4 and below suffer from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 10b28440296e69c4db952b068665c6894e07ffc6857babc5166dc7fe083cde72

Download | Favorite | View

Hero Framework 3.76 Cross Site Scripting

Posted Jan 11, 2013

Authored by Stefan Schurtz

Hero Framework version 3.76 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 4d0f44952295c2906ae21b003ed926cedf8f15614af2730d2fda474afa75b706

Download | Favorite | View

Heise.de Cross Site Scripting

Posted Jan 11, 2013

Authored by Stefan Schurtz

The heise.de site suffers from a reflective cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 8fd7c85439a605e446c8c2cf6fd876c19e8cd23e97fc67b703b2472df1e97294

Download | Favorite | View

ElitePartner.de Cross Site Scripting

Posted Jan 11, 2013

Authored by Stefan Schurtz

The www.elitepartner.de site suffers from a REFERER-based cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 3a5739370ac00677e8ce70c188395bb7f6a1ccc2940c8c4135b13a056e87a498

Download | Favorite | View

Websitebaker Concert Calendar 2.1.4 XSS / SQL Injection

Posted Jan 10, 2013

Authored by Stefan Schurtz

Websitebaker add-on Concert Calendar version 2.1.4 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 08f398cedb0b208dc2348c5f4b971fa4c1f1f8a17d18a0ccc2f9741ea6710a5b

Download | Favorite | View

Joomla 2.5.6 Cross Site Scripting

Posted Sep 20, 2012

Authored by Stefan Schurtz

Joomla version 2.5.6 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | d76bba197769c768a7c9a47c8d81b2aa6931c6c4947bd69daf703f656280e914

Download | Favorite | View

Admidio 2.3.5 Cross Site Scripting / SQL Injection

Posted Sep 1, 2012

Authored by Stefan Schurtz

Admidio version 2.3.5 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | aaef337b3e36f2b58275e83626d4bd8d96b1b635d5408e61e4b59a8aa2eb9489

Download | Favorite | View

SaltOS 3.1 Cross Site Scripting

Posted Aug 24, 2012

Authored by Stefan Schurtz

SaltOS version 3.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 42a257694ae051a813d78c610598ea47727f9265e274f370aee56b125cf5f32e

Download | Favorite | View

WordPress Quick Post Widget 1.9.1 Cross Site Scripting

Posted Aug 10, 2012

Authored by Stefan Schurtz

WordPress Quick Post Widget version 1.9.1 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2012-4226

SHA-256 | c53903954e7e0f91b85b053b9af5e6097aaa459c1caeadd1de76de9bde6c66de

Download | Favorite | View

WordPress Count Per Day 3.1.1 Cross Site Scripting

Posted Jul 17, 2012

Authored by Stefan Schurtz

WordPress plugin Count Per Day version 3.1.1 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 28361cdd395c57304d759e3a7c3969bfc5d760b11accedd798ecce30a9dacbee

Download | Favorite | View