Soco CMS Local File Include Vulnerability

No description provided by source. Exploit Title: Soco CMS Local File Include Google Dork: Powered by Soco Date: 28/04/2012 Author: BHG Security Center H0me : www.black-hg.org Software Link: http://hentan.eu/php/Soco/ Version: last version Tested on: Linux/Ubuntu - Windows7 p0c :...

Joomla 1.7 / 2.5 Civicrm Arbitrary File Upload

Exploit Title: joomla 1.7 & 2.5 comcivicrm Arbitrary File Upload Vulnerability Google Dork: inurl:/components/comcivicrm/ Date: 08/22/2012 Author: Crim3R download Link : http://sourceforge.net/projects/civicrm/files/civicrm-stable/ Tested on: all ================================== D3m0:...

Booklight SQL Injection

Exploit Title: Booklight SQL Injection Vulnerabilities Google Dork: "by Booklight Inc" Date: 2012/04/29 Category : Web Application Author: BHG Security Center Discovered by : Nitrojen90 WebSite : black-hg.org Software Link: http://booklightinc.com/ Version: Last Version Security Risk::High Tested...

Soco CMS - Local File Inclusion

Soco CMS - Local File Inclusion Exploit Title: Soco CMS Local File Include Google Dork: "Powered by Soco" Date: 28/04/2012 Author: BHG Security Center H0me : www.black-hg.org Software Link: http://hentan.eu/php/Soco/ Version: last version Tested on: Linux/Ubuntu - Windows7 p0c :...

Axous 1.1.0 SQL Injection

Exploit Title : Axous 1.1.0 SQL Injection Vulnerabilitiy Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor Link : www.axous.com Contact : [email protected] , [email protected] Security Risk : High DorK : intext:"Powered by...

Damex SQL Injection

Exploit Title : Damex SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Contact : [email protected] , [email protected] Portal Link : www.damex.fi Security Risk : High DorK : "Powered by Damex" Expl0iT:...

Firstload.com Cross Site Scripting

Exploit Title: Firstload.com usenet Provider Cross Site Scripting Google Dork: - Date: 30/3/2012 Author: Crim3R contact : [email protected] Tested on: ALL CVE : XSS Vulnerable searching for filenames is Vulnerable to Cross Site Scripting http://www.firstload.com/?uniq=1364f75a67db1bc2&log=47382&fn=...

immediaC CMS SQL Injection

Exploit Title: immediaC CMS SQL Injection Vulnerabilitiy Google Dork: "Powered by immediaC" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.immediac.com Version: All Version Category:: webapps Security Risk:: High Tested on:...

WordPress LivePHP Cross Site Scripting

Exploit Title: Wordpress wp-livephp plugin Cross-Site Scripting Vulnerability Google Dork: "Powered by Wordpress" Date: 25/12/2011 Author: H4ckCity Security Team Discovered By: Am!r IrIsT Home: WwW.H4ckCity.Org Software Link: http://wordpress.org/extend/plugins/wp-livephp/ Version: All Version...

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities

---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities Google Dork:...

PHP Photo Album 0.4.1.16 Cross Site Scripting / Disclosure

---------------------------------------------------------------- PHP Photo Album Poc 2 http://localhost/phpAlbum/main.php?cmd=albumnew&keyword=XSS Demo :http://www.iloveazucar.com/phpAlbum/main.php?cmd=albumnew&keyword="onmouseover%3dprompt975554 bad%3d" Demo :http://www.dolfpretorius.com/main.ph...