Twoja Witryna CMS SQL Injection

Exploit Title: Twoja Witryna CMS SQL Injection Vulnerability Google Dork: "Powered by: Twoja Witryna" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.adx.hk Version: All Version Category:: webapps Security Risk:: High Tested on...

AiDesign SQL Injection

Exploit Title: AiDesign SQL Injection Vulnerability Google Dork: "Powered by: AiDesign" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.adx.hk Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

Marinet CMS SQL Injection

Exploit Title: Marinet CMS SQL Injection Vulnerability Google Dork: "powered by Marinet" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.marinet.gr Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Lin...

Luxun CMS SQL Injection

Exploit Title: Luxun CMS SQL Injection Vulnerability Google Dork: "powered by luxun" Date: 7/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.marinet.gr Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

Winn Guestbook v2.4.8c Stored XSS

Exploit Title: Winn Guestbook v2.4.8c Stored XSS Date: 12/29/11 Author: G13 Software Link: http://code.google.com/p/winn-guestbook/, http://www.winn.ws Version: 2.4.8c Category: webapps php CVE: 2011-5026 Vulnerability There is no sanitation on the input of the name variable. This allows maliciou...

IRIS SQL Injection

Exploit Title: IRIS SQL Injection Vulnerability Google Dork: intext:"Powered by iris" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.iris.tn Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

CommonSense CMS script Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: CommonSense CMS script Blind SQL Injection Vulnerability Google Dork: intext:"Powered by CommonSense CMS script" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Versi...

CommonSense CMS Blind SQL Injection

Exploit Title: CommonSense CMS script Blind SQL Injection Vulnerability Google Dork: intext:"Powered by CommonSense CMS script" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on:...

Mediashaker Blind SQL Injection

Exploit Title: Mediashaker Blind SQL Injection Vulnerabilitiy Google Dork: inurl:content.php "Powered by Mediashaker" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

Posse Sports SQL Injection

Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version Category:: webapps Security Risk:: High Tested o...

Biz Technologies SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

Mediashaker Blind SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Mediashaker Blind SQL Injection Vulnerabilitiy Google Dork: inurl:content.php "Powered by Mediashaker" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version...

SyriaNobles SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: SyriaNobles SQL Injection Vulnerabilitiy Google Dork: inurl:view-page.php "Powered by SyriaNobles" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category::...

EasyWebRealEstate Blind SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy Google Dork: inurl:listings.php "Powered by EasyWebRealEstate" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

immediaC CMS SQL Injection

Exploit Title: immediaC CMS SQL Injection Vulnerabilitiy Google Dork: "Powered by immediaC" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.immediac.com Version: All Version Category:: webapps Security Risk:: High Tested on:...

Posse Softball Director CMS - SQL Injection

Posse Softball Director CMS - SQL Injection Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version...

Biz Technologies SQL Injection

Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.biztechnepal.com Version: All Version Category:: webapps...

SyriaNobles SQL Injection

Exploit Title: SyriaNobles SQL Injection Vulnerabilitiy Google Dork: inurl:view-page.php "Powered by SyriaNobles" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubun...

Posse Softball Director CMS - SQL Injection

Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version Category:: webapps Security Risk:: High Tested o...

Tiny Guest Book Cross Site Scripting

Exploit Title: Tinyguestbook XSS Date: 01/03/12 Author: G13 Software Link: http://code.google.com/p/tinyguestbook/ Category: webapps php Vulnerability There is no sanitation on the input of the msg variable. This allows malicious scripts to be added. This is a stored XSS Vendor Notification...