Showing 1 - 12 of 12

Files

Free Reprintables ArticleFR 11.06.2014 Improper Access Control: Posted Jul 31, 2014; Authored by High-Tech Bridge SA | Site htbridge.com; High-Tech Bridge Security Research Lab discovered vulnerability in ArticleFR, which can be exploited to execute arbitrary UPDATE SQL statements, alter information stored in the database, and gain complete control over the web site.; tags | exploit, web, arbitrary; advisories | CVE-2014-4170; SHA-256 | cafb28bb825188284ca3e1bf56f3c9f0d39b3d6156ac9a33fbbe7021a4072fe2; Download | Favorite | View

Related Files

articleFR 3.0.7 Arbitrary File Read: Posted Oct 26, 2015; Authored by cfreer, 0keeteam; articleFR version 3.0.l7 suffers from an arbitrary file read vulnerability.; tags | exploit, arbitrary, info disclosure; advisories | CVE-2015-6591; SHA-256 | f5c21447e511ce77030ac064707ce1de30ed4c18d8ee7ddeeede4dc751d03f3c; Download | Favorite | View

ArticleFR 3.0.6 Cross Site Request Forgery: Posted Jul 14, 2015; Authored by LiquidWorm | Site zeroscience.mk; ArticleFR version 3.0.6 allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to perform certain actions with administrative privileges if a logged-in user visits a malicious web site.; tags | exploit, web; SHA-256 | fc4cceecf98e26b34c3709337914564c092fc67141584a9307de989d67ef1162; Download | Favorite | View

ArticleFR 3.0.6 Cross Site Scripting: Posted Jul 14, 2015; Authored by LiquidWorm | Site zeroscience.mk; ArticleFR suffers from multiple stored cross site scripting vulnerabilities. The issues are triggered when input passed via the POST parameter 'name' in Categories, POST parameters 'title' and 'rel' in Links and GET parameter 'url' in PingServers module is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site. Version 3.0.6 is affected.; tags | exploit, arbitrary, vulnerability, xss; SHA-256 | 97577b9ace469f43b13d8ce2548ca3144fe75dccb6067e8bf74ca67d2b2dbe4f; Download | Favorite | View

articleFR CMS 3.0.5 Cross Site Scripting: Posted Jan 23, 2015; Authored by Tien Tran Dinh; articleFR CMS version 3.0.5 suffers from a cross site scripting vulnerability.; tags | exploit, xss; advisories | CVE-2015-1363; SHA-256 | a7eec6dd3bb01b1d47f2da23b35af63ca219b46a7c1690081c0abac2fbb389cb; Download | Favorite | View

articleFR CMS 3.0.5 SQL Injection: Posted Jan 21, 2015; Authored by Tien Tran Dinh; articleFR CMS version 3.0.5 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; advisories | CVE-2015-1364; SHA-256 | cf0e954b5df6aa5ec410aaab404196e221790b3b12e65427bddab5a4f981b512; Download | Favorite | View

articleFR CMS 3.0.5 Arbitrary File Upload: Posted Jan 21, 2015; Authored by Tien Tran Dinh; articleFR CMS version 3.0.5 suffers from a remote shell upload vulnerability.; tags | exploit, remote, shell, file upload; SHA-256 | d22f88190e4b7574ddc03829fdb82d0a8e70d366f3680baa8810712c85962c4d; Download | Favorite | View

ArticleFR 3.0.4 SQL Injection: Posted Aug 20, 2014; Authored by High-Tech Bridge SA | Site htbridge.com; ArticleFR version 3.0.4 suffers from a remote SQL injection vulnerability.; tags | exploit, remote, sql injection; advisories | CVE-2014-5097; SHA-256 | 7c5659fce0f2f013119ba1cb640fb4096e1cb15afb78f203f05a4d647b441c86; Download | Favorite | View

Article Friendly Local File Inclusion: Posted Feb 25, 2010; Authored by Pratul Agrawal; Article Friendly suffers from a local file inclusion vulnerability.; tags | exploit, local, file inclusion; SHA-256 | bc6d96165ee0b4314aced6aba236f9bd3f29556c15be47378166e74df0c8237e; Download | Favorite | View

Article Friendly Cross Site Request Forgery: Posted Feb 25, 2010; Authored by Pratul Agrawal; Article Friendly suffers from a cross site request forgery vulnerability.; tags | exploit, csrf; SHA-256 | 2289f4d4b96fe50966f5f60c77faa635832f9b6e4517c045697eb2c5f817986d; Download | Favorite | View

ArticleFriend Script Cross Site Scripting: Posted Aug 5, 2009; Authored by MizoZ; ArticleFriend Script version 2 suffers from a cross site scripting vulnerability in search_advance.php.; tags | exploit, php, xss; SHA-256 | fc7bf25516fdf3ca53f943595f1628e2f13310fc5c351f7b965d9f1a0fe13b86; Download | Favorite | View

Secunia Security Advisory 36077: Posted Aug 4, 2009; Authored by Secunia | Site secunia.com; Secunia Security Advisory - MizoZ has reported a vulnerability in ArticleFriend Script, which can be exploited by malicious people to conduct cross-site scripting attacks.; tags | advisory, xss; SHA-256 | a638aee8eb58754cb8ae00d3c65e04ab3b39b922a3cbb451632a0ec2d5b5007d; Download | Favorite | View

articlefriendly-sql.txt: Posted Jul 31, 2008; Authored by Mr.SQL | Site pal-hacker.com; Article Friendly Pro and Article Friendly Standard suffer from a SQL injection vulnerability in categorydetail.php.; tags | exploit, php, sql injection; SHA-256 | f28480aef81574fe30a8d8f8bc0c80266e1bdb63b14fd2cde0dd3a3ae3da64bb; Download | Favorite | View

Page 1 of 1 Back 1 Next