immediaC CMS SQL Injection

Exploit Title: immediaC CMS SQL Injection Vulnerabilitiy Google Dork: "Powered by immediaC" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.immediac.com Version: All Version Category:: webapps Security Risk:: High Tested on:...

SyriaNobles SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: SyriaNobles SQL Injection Vulnerabilitiy Google Dork: inurl:view-page.php "Powered by SyriaNobles" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category::...

Posse Softball Director CMS - SQL Injection

Posse Softball Director CMS - SQL Injection Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version...

Biz Technologies SQL Injection

Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.biztechnepal.com Version: All Version Category:: webapps...

Tiny Guest Book Cross Site Scripting

Exploit Title: Tinyguestbook XSS Date: 01/03/12 Author: G13 Software Link: http://code.google.com/p/tinyguestbook/ Category: webapps php Vulnerability There is no sanitation on the input of the msg variable. This allows malicious scripts to be added. This is a stored XSS Vendor Notification...

PHP-X-Links Script - SQL Injection

PHP-X-Links Script - SQL Injection Exploit Title: Php-X-Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by Php-X-Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High...

Php-X-Links Script SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Php-X-Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by Php-X-Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps...

WSN Links Script 2.3.4 - SQL Injection

Exploit Title: WSN Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by WSN Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://scripts.webmastersite.net/wsnlinks Version: All Version Category:: webapps Securi...

WSN Links Script 2.3.4 - SQL Injection

WSN Links Script 2.3.4 - SQL Injection Exploit Title: WSN Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by WSN Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://scripts.webmastersite.net/wsnlinks Version...

WSN Links Script 2.3.4 SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: WSN Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by WSN Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

MDS-JOB version <= 1.4.1 SQL-injection

Exploit for php platform in category web applications Exploit Title: MDS-JOB version = 1.4.1 SQL-injection Date: 02.01.2012 Author: Ereee Version: =1.4.1 Category:: remote, webapps Google dork: inurl:"vacancy.php?id=1" Tested in: web Query:...

PHPB2B Cross Site Scripting

Exploit Title: PHPB2B Cross Site Scripting Vulnerabilitiy Google Dork: "Powered by PHPB2B" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.phpb2b.com Version: All Version Category:: webapps Security Risk:: Low Tested on: GNU/Linu...

WSN Links Script SQL Injection

Exploit Title: WSN Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by WSN Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://scripts.webmastersite.net/wsnlinks Version: All Version Category:: webapps Securi...

wsCMS Cross Site Scripting / SQL Injection

Exploit Title: wsCMS alert/farbodmahini/ www.wbnb-fanb.ca/search.php?search=alert/farbodmahini/ www.gowanbrae.ca/search.php?search=alert/farbodmahini/ Special Thanks : Mehdi.H4ckcity-2MzRp-Mikili-M.Prince-Bl4ck.Viper-iC0d3R- IrIsT-K0242-P0W3RFU7-Mr.M4st3r-HigherSense ,... GreetZ : All H4ckCity...

PHP-X-Links SQL Injection

Exploit Title: Php-X-Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by Php-X-Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows...

Siena CMS 1.242 Cross Site Scripting

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Siena CMS 1.242 alert0 Demo : http://www.sienacms.com/index.php?page="alert0 Demo :...

Grebweb CMS Cross Site Scripting / SQL Injection

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Grebweb Cms alert0 PoC 2 Enter In Search Box XSS Code PoC : http://localhost/index.php Demo : http://www.yagyashree.com/index.php...

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting

Exploit Title: Winn Guestbook v2.4.8c Stored XSS Date: 12/29/11 Author: G13 Software Link: http://code.google.com/p/winn-guestbook/, http://www.winn.ws Version: 2.4.8c Category: webapps php CVE: 2011-5026 Vulnerability There is no sanitation on the input of the name variable. This allows maliciou...

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting Exploit Title: Winn Guestbook v2.4.8c Stored XSS Date: 12/29/11 Author: G13 Software Link: http://code.google.com/p/winn-guestbook/, http://www.winn.ws Version: 2.4.8c Category: webapps php CVE: 2011-5026 Vulnerability There is no sanitation...

SASHA v0.2.0 Mutiple XSS

Exploit Title: SASHA v0.2.0 Mutiple XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/sasha/files/ Version: 0.2.0 Category: webapps php Vulnerability When adding a new course to the schedule, the application relies on Client Side controls for input. This can easily be...