Skip to content

Archives: Exploits

PrestaShop 1.5.1 – Persistent Cross-Site Scripting

PrestaShop 1.4.7 – Multiple Cross-Site Scripting Vulnerabilities

Drupal Module Drag & Drop Gallery 6.x-1.5 – ‘upload.php’ Arbitrary File Upload

opencart 1.5.2.1 – Multiple Vulnerabilities

Drupal 7.12 – Multiple Vulnerabilities

Drupal Module CKEditor 3.0 < 3.6.2 - Persistent EventHandler Cross-Site Scripting

PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) – Multiple Cross-Site Scripting Vulnerabilities

Prestashop 1.4.4.1 – ‘displayImage.php’ HTTP Response Splitting

PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php?Expedition’ Cross-Site Scripting

PrestaShop 1.4.4.1 – ‘/modules/mondialrelay/googlemap.php’ Multiple Cross-Site Scripting Vulnerabilities

PrestaShop 1.4.4.1 – ‘/admin/ajaxfilemanager/ajax_save_text.php’ Multiple Cross-Site Scripting Vulnerabilities

OpenCart 1.5.1.2 – Blind SQL Injection

PrestaShop 1.3.6 – ‘cms.php’ Remote File Inclusion

OpenCart 1.4.9 – Multiple Local File Inclusions

Drupal Module Cumulus 5.x-1.1/6.x-1.4 – ‘tagcloud’ Cross-Site Scripting

Drupal Module CAPTCHA – Security Bypass

Drupal Module Embedded Media Field/Media 6.x : Video Flotsam/Media: Audio Flotsam – Multiple Vulnerabilities

Opencart 1.4.9.1 – Arbitrary File Upload

OpenCart 1.3.2 – ‘page’ SQL Injection

Drupal < 5.22/6.16 - Multiple Vulnerabilities

Drupal 6.15 – Multiple Persistent Cross-Site Scripting Vulnerabilities

Drupal 5.21/6.16 – Denial of Service

Drupal Module Sections 5.x-1.2/6.x-1.2 – HTML Injection

Drupal Module Sections – Cross-Site Scripting

Opencart 1.1.8 – ‘route’ Local File Inclusion

PrestaShop 1.1 – ‘/admin/login.php?PATH_INFO’ Cross-Site Scripting

PrestaShop 1.1 – ‘order.php?PATH_INFO’ Cross-Site Scripting

Drupal Module Ajax Checklist 5.x-1.0 – Multiple SQL Injections

Drupal 5.2 – PHP Zend Hash ation Vector

Drupal 4.7 – ‘Attachment mod_mime’ Remote Command Execution

Drupal 4.x – URL-Encoded Input HTML Injection

Drupal 4.1/4.2 – Cross-Site Scripting

Drupal 4.0 – News Message HTML Injection