# Title: Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities
# EDB-ID: 10458
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Milos Zivanovic
# Published: 2009-12-15
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
[#-----------------------------------------------------------------------------------------------#]
[#] Title: Ez Blog (XSS/XSRF) Multiple Vulnerabilities
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 15. December 2009.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: Ez Blog
[#] Version: 1.0
[#] Platform: PHP
[#] Link: link:http://www.scriptsez.net/?action=details&cat=Content%20Management&id=2579678051
[#] Price: 15 USD
[#] Vulnerability: [...]

Continue reading...

# Title: Daloradius XSS Vulnerability
# EDB-ID: 10460
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Hadi Kiamarsi
# Published: 2009-12-15
# Verified: yes
# Download Exploit Code
# Download Vulnerable app
view source
print?
###########################################
#
# Script Name : daloradius ( All Version )
#
# Bug Type : XSS vulnerability
#
# Found by : Hadi Kiamarsi
#
# Contact : hadikiamarsi [at] hotmail.com
#
# Download : http://sourceforge.net/projects/daloradius/
#
###########################################
PoC :
http://[target]/[path]/daloradius-users/login.php?error=>”><script>alert(’Hadi Kiamarsi’)</script>
example :
http://www.example.com/daloradius-users/login.php?error=>”><script>alert(’Hadi Kiamarsi’)</script>
local [...]

Continue reading...

# Title: Ez Cart v1.0 Multiple XSRF Vulnerabilities
# EDB-ID: 10461
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Milos Zivanovic
# Published: 2009-12-15
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
[#-----------------------------------------------------------------------------------------------#]
[#] Title: Ez Cart Multiple XSRF Vulnerabilities
[#] Author: Milos Zivanovic
[#] Email: milosz.security[at]gmail.com
[#] Date: 15. December 2009.
[#-----------------------------------------------------------------------------------------------#]
[#] Application: Ez Cart
[#] Version: 1.0
[#] Platform: PHP
[#] Link: http://www.scriptsez.net/?action=details&cat=Content%20Management&id=2472658093
[#] Price: 25 USD
[#] Vulnerability: [...]

Continue reading...

# Title: DubSite CMS v1.0 CSRF Vulnerability
# EDB-ID: 10462
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Connection
# Published: 2009-12-15
# Verified: yes
# Download Exploit Code
# Download Vulnerable app
view source
print?
Pentest Information:
====================
Connection has discovered a Cross Site Request Forgery(CSRF) vulnerability in DubSite CMS v1.0
Details
=======
Tested on OS:       Windows XP
Tested with Software:   Mozilla Firefox 3.5.x
Vulnerable Products:    DubSite CMS
Affected Versions:  1.0
Vulnerability Type: Cross [...]

Continue reading...

# Title: iGaming CMS v1.5 CSRF Vulnerability
# EDB-ID: 10463
# CVE-ID: ()
# OSVDB-ID: ()
# Author: NeX
# Published: 2009-12-15
# Verified: yes
# Download Exploit Code
# Download N/A
view source
print?
NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries.
Pentest Information:
============
NeX has discovered [...]

Continue reading...