WordPress SendIt plugin <= 1.5.9 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using...

Bonza Digital Cart Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the comma...

BisonFTP Server <=v3.5 Remote Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python BisonFTP Server \n" %sys.argv0 sys.exit print "\n! Connecting to %s ..." %sys.argv1 connect to host sock = socketAFINET,SOCKSTREAM sock.connectsys.argv1,intsys.argv2 sock.recv1024 time.sleep5 padding buffer = "\x90" 1092 36...

MinaliC Webserver v2.0 Remote Source Disclosure

Exploit for windows platform in category remote exploits Exploit Title : MinaliC Webserver v2.0 Remote Source Disclosure Software link : http://sourceforge.net/projects/minalic/ Version : 2.0 Tested on : Windows 7 Home Premium Date : 27/07/2011 Author : X-h4ck Website : http://www.pirate.al ,...

Freefloat FTP Server Buffer Overflow Vulnerability (MSF)

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

Word List Builder 1.0 Buffer Overflow Exploit (MSF)

Exploit for windows platform in category local exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Rhythmbox (.m3u) Local Crash Poc

Exploit for linux platform in category dos / poc Exploit Title: Rhythmbox .m3u Local Crash Poc Author: Caddy-Dz Facebook Page: www.facebook.com/islam.caddy E-mail: email protected / / | email protected / / Website: www.exploit-id.com Category:: webapps Tested on: Ubuntu 10.10 - French Note ! :...

Pika CMS <= (showSource.php) Local File Inclusion

Exploit for php platform in category web applications Pika CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...

EditorMonkey WordPress plugin (FCKeditor) Arbitrary File Upload

Exploit for php platform in category web applications WordPress EditorMonkey FCKeditor Remote File Upload Author : kaMtiEz email protected Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 14 May, 2011 Software Information + Vendor :...

RealPlayer 11 Browser (res://ieframe.dll) Remote Arbitrary Code

Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

Microsoft Windows xp AFD.sys Local Kernel DoS Exploit

Exploit for windows platform in category dos / poc //////////////////////////////////////////////////////////////////////////// // // Title: Microsoft Windows xp AFD.sys Local Kernel DoS Exploit // Author: Lufeng Li of Neusoft Corporation // Vendor: www.microsoft.com // Vulnerable: Windows xp sp3...

Xoops 2.5.0 (banners.php) LFI Vulnerability

Exploit for php platform in category web applications Title : Xoops 2.5.0 banners.php LFI Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Local File Inclusion Tested on : Window...

Planet FPS-1101 Cross-site Scripting Vulnerability

Exploit for hardware platform in category web applications GotGeek Labs http://www.gotgeek.com.br/ Planet FPS-1101 Cross-site Scripting Vulnerability + Description Equipped with the Parallel printing interfaces, the FPS-1101 makes your printer available be shared in most popular network...

Joomla! 1.6 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

RuubikCMS Version 1.0.3 Multiple Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- WebApplication : RuubikCMS Version 1.0.3 Type of vunlnerability : CSRF Change Admin Password And XSS Risk of use : Medium...

Raja Natarajan Guestbook 1.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit App: http://sourceforge.net/projects/phpscript/files/phpscript/Raja%20Guestbook/guestbook1.0.zip/download Author: h0rd Vuln:...

PHP Script Directory Software (sbcat_id) SQL Injection Vulnerability

Exploit for php platform in category web applications == Author: BorN To K!LL - h4ck3r Contact: email protected == Script: PHP script directory software Version: n/a Link: http://www.softbizsolutions.com/script-directory-software.php == 3xploit: path/showcats.php?sbcatid=SQL-Injection 3xample:...

PHP Classified ads software (cid) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == -Author: BorN To K!LL - h4ck3r -Contact: email protected == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample:...

PHP auctions (viewfaqs.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == Script: PHP auctions Version: n/a Link: http://phpauctions.info == Author: BorN To K!LL - h4ck3r Contact: email protected == 3xploit: /viewfaqs.php?cat=Blind-Injection 3xample: /viewfaqs.php?cat=2 and substringversion,1,1=4 // false ,,...

Chilkat Software FTP2 ActiveX Component Remote Code Execution

Exploit for windows platform in category remote exploits ============================================================= Chilkat Software FTP2 ActiveX Component Remote Code Execution ============================================================= obj.UnlockComponent"suntzu"; //needed for file transfe...